Software Standards Manager

Alliance Automotive Group (AAG) is a leading distributor of passenger and commercial vehicle parts to the independent automotive aftermarket in Europe. It operates in France, the U.K., Ireland, Germany, the Netherlands, Belgium, Spain, Portugal, Poland, Hungary and Romania. The company is a wholly-owned subsidiary of Genuine Parts Company (GPC), the largest global automotive replacement parts distributor with activities in North America, Europe, and Australasia.

AAG’s network serves thousands of customers across Europe supported by a logistics infrastructure of 75 Distribution Centres, approximately 2,550 Stores and thousands of vehicle repairers, body shops and auto-centres. AAG has a revenue of 3.4 billion euros with over 17,000 employees. Learn more ianceautomotivegroup.eu

The Software Standards Manager is a new role within Alliance Automotive UK & Ireland, reporting to the Head of Digital & Internal Applications. Operating across both B2B, B2C and internal technology teams, this role exists to bring structure, visibility, and control to a diverse and evolving software landscape shaped by organic and acquisition growth.

With multiple homegrown and proprietary applications primarily built on .NET and LAMP stacks, our engineering teams have historically operated with autonomy in tooling, frameworks, and processes. As we continue to scale, we must now centralise standards around source code management, vulnerability remediation, technical debt allocation, and risk reporting—without disrupting the pace of business value delivery.

The Software Standards Manager acts as the bridge between delivery-focused development teams and compliance, cyber, and risk stakeholders. This role protects engineering capacity by creating a structured intake and prioritisation model for security and compliance requests, ensuring they are logged, translated into backlog items, and progressed in a measurable way.

You will own the catalogue of internally developed applications, maintain visibility of framework lifecycle status, and oversee vulnerability posture across SAST and monitoring tools such as New Relic and Tenable. Through clear weekly reporting and monthly scorecards, you will provide leadership with a single, reliable view of remediation progress and risk exposure.

This is a highly visible and influential role, combining governance, technical literacy and stakeholder management to ensure our software estate is secure and sustainable.

• Own and maintain a centralised catalogue of all internally developed applications, including framework versions, hosting environments, ownership, and lifecycle status
• Drive the centralisation and standardisation of code repository management and software governance practices
• Establish and manage a structured intake process for cyber and compliance requirements
• Consolidate vulnerability findings from tools such as New Relic, Tenable, and other monitoring platforms
• Translate security and compliance findings into clearly defined, prioritised backlog items within Agile workflows
• Participate in Agile ceremonies (stands-ups, reviews, retrospectives) to ensure visibility and progress of remediation tasks
• Advocate for and track a defined allocation of development capacity toward technical debt and vulnerability remediation
• Protect development teams from unstructured or reactive requests by creating a controlled and prioritised engagement model

• Act as the primary liaison between Digital, Compliance, and Cyber teams
• Design and own structured reporting templates, dashboards, and scorecards
• Provide weekly progress updates and monthly governance scorecards to the Head of Department(s) and wider stakeholders
• Establish a single source of truth for software risk posture and remediation progress
• Clearly communicate risk exposure, remediation velocity, and technical debt reduction trends
• Reduce reactive reporting cycles by implementing consistent and predictable governance communications
• Support leadership decision-making with accurate, transparent, and actionable insights
• Deliver a long-term change program to enable Ping Identity IGA & MFA across all employee-accessed applications

• Proven experience working within software engineering environments (Agile/Dev Ops)
• Strong understanding of SDLC, backlog management, and sprint planning processes
• Practical experience with vulnerability management and SAST tooling
• Ability to…