Senior Product Cybersecurity GRC Manager

General Motors LLC; United States; Hybrid; USD 140,000 - 200,000; Full time

Job summary

General Motors is seeking a Manager, Cybersecurity Engineer to lead the GRC program for vehicle product cybersecurity. You will own the compliance posture across programs, drive threat modeling, and shape policies and standards to address evolving regulations.

This role requires coordinating global audits, leading a high-performance team, and collaborating with government authorities and internal stakeholder groups.

Qualifications

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Engineering, or a related field.
• Minimum 10 years of experience in cybersecurity, with focus on GRC, regulatory compliance, or product/automotive cybersecurity.
• Demonstrated experience leading teams, including people management and talent development.
• Deep knowledge of UNR155, UNECE WP.29, NIST CSF and global automotive cybersecurity regulations.
• Experience in Vehicle Type Approval processes and/or CSMS audits with government/regulatory bodies.
• Hands-on experience with Threat Analysis and Risk Assessment (TARA).
• Strong expertise in ISO/SAE 21434, ISO 27001, NIST CSF, NIST SP 800-53.
• Experience developing or maintaining cybersecurity policies and standards.

Responsibilities

• Own and maintain GM's product cybersecurity controls framework across vehicle programs and markets.
• Lead TARA activities ensuring threat models are current and integrated into product lifecycle.
• Provide requirements for cybersecurity policies and standards; drive approvals and cross-functional alignment.
• Monitor global automotive cybersecurity regulations and translate changes into actionable obligations.
• Oversee UNR155 compliance, Vehicle Type Approval, and CSMS audits with government/regulatory bodies.
• Manage audit readiness, evidence prep, submission coordination, and post-audit remediation.
• Build relationships with government authorities, type approval bodies, and technical services.
• Identify control gaps and drive cross-functional remediation with engineering teams.
• Establish tracking for control gap closure and report status to leadership.
• Conduct root cause analyses and implement durable remediation strategies.

Skills

GRC leadership

Threat Modeling

Regulatory compliance

Cybersecurity policy

UNR155

UNECE WP.29

ISO/SAE 21434

Audits & evidence

Cross-functional leadership

Education

Bachelor's in Cybersecurity

Master's in a related field

Tools

GRC tools

Job description

General Motors is seeking a Manager, Cybersecurity Engineer to lead the GRC program for vehicle product cybersecurity. You will own the compliance posture across programs, drive threat modeling, and shape policies and standards to address evolving regulations.

This role requires coordinating global audits, leading a high-performance team, and collaborating with government authorities and internal stakeholder groups.