Manager - Product Cyber Security Compliance
Core
Own GM's vehicle product cybersecurity compliance posture, including threat analysis, risk assessment, regulatory compliance, and orchestrating government-facing audits.
Role type
Senior IC manager (cybersecurity GRC)
Builds
Global regulatory compliance programs and audit readiness for vehicle products
Domain
Automotive cybersecurity and regulatory compliance
Required skills
Cybersecurity GRC expertise, UNR155/UNECE WP.29 regulatory knowledge, TARA methodologies, control gap remediation, cross-functional stakeholder management, team leadership, policy development, global program management
Preferred skills
CGRC/CRISC/CISA/CISSP certifications, vehicle theft compliance knowledge, GRC software tools experience, automotive embedded systems knowledge, technical service organization engagement
Technologies
ISO/SAE 21434, ISO 24089, NIST CSF, NIST SP 800-53, Archer, ServiceNow, IBM OpenPages
Responsibilities
Maintain product cybersecurity controls framework, lead TARA activities, provide requirements for cybersecurity policies, monitor global regulations, manage UNR155/VTA/CSMS audits, identify and remediate control gaps, partner with engineering and legal teams, lead and mentor cybersecurity GRC team
Seniority
Manager, people leadership
