Manager – Product Cyber Security Compliance

Responsibilities

• Own and maintain GM’s product cybersecurity controls framework, ensuring coverage across all applicable vehicle programs, markets, and regulatory requirements.
• Lead and oversee Threat Analysis and Risk Assessment (TARA) activities for vehicle product systems.
• Provide requirements for and input to product cybersecurity policies and standards.
• Monitor and interpret global automotive cybersecurity regulations and standards.
• Manage all aspects of audit readiness and post‑audit remediation.
• Lead the identification, assessment, and prioritization of cybersecurity control gaps across vehicle product systems.
• Partner closely with the Vehicle Cybersecurity Engineering team and other engineering organizations.
• Lead, develop, and mentor a team of cybersecurity GRC professionals.

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Engineering, or a related field
• Minimum 10 years of experience in cybersecurity, with a focus on GRC, regulatory compliance, or product/automotive cybersecurity
• Demonstrated experience leading teams, including people management, performance management, and talent development
• Deep knowledge of UNR
  155, UNECE WP.29, NIST CSF and global automotive cybersecurity regulatory frameworks
• Experience orchestrating or directly participating in Vehicle Type Approval processes and/or CSMS audits with government or regulatory bodies
• Hands‑on experience with Threat Analysis and Risk Assessment (TARA) methodologies and integration into the vehicle development lifecycle
• Strong expertise in cybersecurity controls frameworks (e.g., ISO/SAE 21434, ISO 27001, NIST CSF, NIST SP 800-53)
• Excellent communication, presentation, and interpersonal skills — able to engage effectively with technical teams, senior leadership, and government representatives