Manager, Software Supply Chain Security

Descripción

General Motors is building secure software into every vehicle, product, and digital experience we deliver. We are seeking a people leader to lead our Software Supply Chain Security function and help reduce risk before software reaches production.

This team is responsible for secure-by-design controls across code, dependencies, developer tooling, build and release pipelines, containers, and third-party software. The work includes governance, open-source software security, software bill of materials, continuous integration and delivery controls, integrated development environment controls, and container security. This role is ideal for a leader who can turn strategy into execution, build strong teams, and partner across engineering to make secure delivery easier at scale.

The Role

As Manager, Software Supply Chain Security, you will lead a distinct cybersecurity function responsible for reducing software supply chain risk across GM. You will translate strategy into team direction, operating priorities, and measurable outcomes while making resource, workforce, and operational decisions that scale impact. You will work closely with software engineering, developer platform, cloud, infrastructure, procurement, and risk partners to embed practical security controls into the software lifecycle. You will own key performance indicators, drive continuous improvement, and help shape a developer-friendly security model that protects the business without slowing delivery. This is a high-impact leadership role for someone who can build talent, influence across organizations, and lead change in a complex technical environment.

What You’ll Do

• Lead the strategy, roadmap, and day-to-day operation of GM's Software Supply Chain Security function.
• Build, develop, and lead a high-performing team, including hiring, coaching, performance management, and workforce planning.
• Own security outcomes and key performance indicators for code dependency risk, software bill of materials coverage, third-party software security, pipeline controls, and container security.
• Drive cross-functional decisions with engineering, platform, cloud, infrastructure, procurement, and risk teams to embed secure-by-design controls into delivery workflows.
• Establish and improve policies, standards, and reusable guardrails for open-source software use, software provenance, build integrity, artifact security, and developer tooling.
• Prioritize investments, allocate resources, and lead change initiatives that improve security effectiveness, operational consistency, and developer experience.

Your Skills & Abilities (Required Qualifications)

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field.
• 8+ years of experience in cybersecurity, application security, platform security, software engineering, or a closely related technical field.
• 3+ years of people leadership experience, including hiring, coaching, performance management, and organizational planning.
• 3+ years of experience leading or owning programs in software supply chain security, secure software delivery, build pipeline security, container security, or third-party software risk.
• Demonstrated experience working across 2 or more technical domains such as source control, build systems, artifact repositories, cloud platforms, containers, developer tooling, or software governance.
• Experience defining, tracking, and improving operational metrics and key performance indicators for a technical or security function.
• Proven ability to influence cross-functional stakeholders and drive decisions on significant technical and operational matters.

What Will Give You A Competitive Edge (Preferred Qualifications)

• Advanced degree in Cybersecurity, Computer Science, Engineering, Business, or a related field.
• Experience leading software supply chain security in a large, complex enterprise environment.
• Experience with software bill of materials programs, open-source software governance, software composition analysis, artifact signing, or build provenance.
• Experience with developer platforms, continuous integration and delivery pipelines, container platforms, cloud-native environments, or integrated development environment governance.
• Experience leading transformation initiatives that balance security, reliability, usability, and speed for engineering teams.

GM does not provide immigration-related sponsorship for this role. Do not apply for this role if you will need GM immigration sponsorship now or in the future. This includes direct company sponsorship, entry of GM as the immigration employer of record on a government form, and any work authorization requiring a written submission or other immigration support from the company (e.g., H1-B, OPT, STEM OPT, CPT, TN, J-1, etc.)

Este puesto se clasifica como híbrido. Esto significa que se espera que el candidato seleccionado se presente en una ubicación específica al menos 3 veces por semana {o con otra frecuencia indicada por su líder}.

Este puesto podría ser elegible para beneficios de relocalización.

Información sobre diversidad

General Motors se compromete a ser un lugar de trabajo en el cual no solo no haya discriminación indebida, sino que fomente con sinceridad la inclusión y el sentido de pertenencia. Creemos firmemente que la diversidad del personal crea un entorno en el cual nuestros empleados pueden prosperar y desarrollar mejores productos para nuestros clientes. Instamos a los candidatos interesados a que revisen las responsabilidades y aptitudes clave para cada puesto y se postulen para los puestos que coincidan con sus habilidades y capacidades. Es posible que, cuando corresponda, se les pida a los solicitantes que están en el proceso de contratación que completen satisfactoriamente una o más evaluaciones relacionadas con su función y/o una evaluación previa al empleo antes de comenzar a trabajar.  Para obtener más información, visite Cómo contratamos.

Declaración de igualdad de oportunidades en el empleo (EE.UU.)

General Motors se enorgullece de ser un empleador que ofrece igualdad de oportunidades.  Todos los solicitantes calificados serán tenidos en cuenta para el empleo sin distinción de raza, color, religión, sexo, orientación sexual, identidad de género, nacionalidad, discapacidad o condición de veterano protegido. 

Adecuaciones (EE.UU. y Canadá)

General Motors ofrece oportunidades a todos los solicitantes de empleo, incluyendo las personas con discapacidades. Si necesita una adecuación razonable para ayudarle con su búsqueda o solicitud de empleo, envíenos un correo electrónico a [email protected] o llámenos al 800-865-7580. En su correo electrónico, incluya una descripción del puesto específico que está solicitando, así como el título del empleo y el número de solicitud del puesto que está solicitando.