Company record
Who leads security at General Motors
The most recent move CISO Tribune has on record at General Motors was announced in the week of December 9, 2024: too long ago to say who holds the seat today. The history below stands; the current holder is not yet confirmed.
Board oversight: General Motors's April 20, 2026 proxy statement names the Risk and Cybersecurity Committee as overseeing, or receiving reports from, this seat. Full passage on our board committee oversight report. The passage in the proxy statement: “The Company's cybersecurity organization is led by the Company's Chief Information Security Officer ("CISO"), who is responsible for assessing and managing material risks from cybersecurity threats and regularly reports to the Risk and Cybersecurity Committee on these matters.”
What General Motors tells the SEC
Its fiscal 2025 Form 10-K, filed January 27, 2026, carries an Item 1C cybersecurity disclosure that describes a Chief Information Security Officer reporting to the Risk and Cybersecurity Committee, with oversight by the Risk and Cybersecurity Committee. Read the section verbatim or the filing on sec.gov. A filing describes governance as of its date, not today's seat.
Tracked by the Wire since December 9, 2024 · 1 recorded move · every claim links to a sourced record · Updated
Where General Motors appears on the record (2)
Every page on CISO Tribune and its network that carries this company, 2 in all.
- On the Wire
- SEC filing
- Form 10-K cybersecurity disclosure, fiscal 2025 · Item 1C, filed January 27, 2026
About General Motors
CISO Tribune's Leadership Bench files General Motors under Industrial & Energy and North America. The SEC classifies it under standard industrial classification 3711, Motor vehicles & passenger car bodies, and EDGAR lists its ticker as GM. The Wire has one security-leadership move at General Motors on record, announced in the week of December 9, 2024.
What General Motors's 10-K says about security governance
General Motors' fiscal 2025 Form 10-K, filed January 27, 2026, describes its cybersecurity governance in Item 1C. The lines below are that filing's own statements, each with the sentence it comes from.
Reporting line: the Chief Information Security Officer reports to the Risk and Cybersecurity Committee.
“The Company's cybersecurity organization is led by the CISO, who is responsible for assessing and managing material risks from cybersecurity threats and reports to the Risk and Cybersecurity Committee.”
Board oversight: the Risk and Cybersecurity Committee.
“The GM Board of Directors is responsible for overseeing the Company's enterprise risk, and has established its Risk and Cybersecurity Committee with specific responsibility for overseeing our cybersecurity program, among other things.”
Experience of the security leadership, as the filing states it:
“The CISO has served in this role since December 2024 and has more than 20 years of experience in various information technology, cybersecurity, and software engineering roles.”
Material incidents: the filing states none.
“The Company has not experienced any material cybersecurity incidents and expenses incurred from cybersecurity incidents were immaterial (including penalties and settlements, of which there were none).”
Plain-English reading and full text of the filing · the filing on sec.gov
Security leadership timeline
Security leaders of General Motors on our record
Mike Hanley: named Chief Information Security Officer, announced in the week of December 9, 2024 record
Security chiefs at other Industrial & Energy organizations
Other organizations CISO Tribune files under Industrial & Energy with a named security chief on record: those in North America first, in alphabetical order from General Motors onward.
NN, Inc.: Gregg Cottage, Chief Information Officer and Chief Information Security Officer.
Packsize: Troy Rydman, Chief Information Officer and Chief Information Security Officer.
Phillips 66: Connie Devine, Chief Information Security Officer (CISO).
The Goodyear Tire & Rubber Company: Thomas Dager, Vice President and Chief Information Security Officer.
Vantage: Dale Drew, Chief Information Security Officer.
ADM: Ruben D. Chacon, Vice President and Global Chief Information Security Officer.
Brunswick: Julie Myerholtz, Vice President – Chief Information Security Officer.
Deere: James Johnson, Vice President and Chief Information Security Officer.
Questions CISOs ask about General Motors
- Who are the security chiefs at other Industrial & Energy organizations?
- On CISO Tribune's record they include Gregg Cottage at NN, Inc., Troy Rydman at Packsize, Connie Devine at Phillips 66 and Thomas Dager at The Goodyear Tire & Rubber Company.
- Who does the security chief of General Motors report to?
- General Motors' fiscal 2025 Form 10-K, filed January 27, 2026, says its Chief Information Security Officer reports to the Risk and Cybersecurity Committee.
- Which board body oversees cybersecurity at General Motors?
- General Motors' fiscal 2025 Form 10-K places oversight of cybersecurity risk with the Risk and Cybersecurity Committee. Its proxy statement filed April 20, 2026 names the Risk and Cybersecurity Committee as overseeing, or receiving reports from, the security seat.
Related guides
CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.