Alliance Automotive Group (AAG) is a leading distributor of passenger and commercial vehicle parts to the independent automotive aftermarket in Europe. It operates in France, the U.K., Ireland, Germany, the Netherlands, Belgium, Spain, Portugal, Poland, Hungary and Romania. The company is a wholly-owned subsidiary of Genuine Parts Company (GPC), the largest global automotive replacement parts distributor with activities in North America, Europe, and Australasia. AAG’s network serves thousands of customers across Europe supported by a logistics infrastructure of 75 Distribution Centres, approximately 2,550 Stores and thousands of vehicle repairers, body shops and auto-centres. AAG has a revenue of 3.4 billion euros with over 17,000 employees. Learn more at www.allianceautomotivegroup.eu

The Software Standards Manager is a new role within Alliance Automotive UK & Ireland, reporting to the Head of Digital & Internal Applications. Operating across both B2B, B2C and internal technology teams, this role exists to bring structure, visibility, and control to a diverse and evolving software landscape shaped by organic and acquisition growth.

With multiple homegrown and proprietary applications primarily built on .NET and LAMP stacks, our engineering teams have historically operated with autonomy in tooling, frameworks, and processes. As we continue to scale, we must now centralise standards around source code management, vulnerability remediation, technical debt allocation, and risk reporting—without disrupting the pace of business value delivery.

The Software Standards Manager acts as the bridge between delivery-focused development teams and compliance, cyber, and risk stakeholders. This role protects engineering capacity by creating a structured intake and prioritisation model for security and compliance requests, ensuring they are logged, translated into backlog items, and progressed in a measurable way.

You will own the catalogue of internally developed applications, maintain visibility of framework lifecycle status, and oversee vulnerability posture across SAST and monitoring tools such as New Relic and Tenable. Through clear weekly reporting and monthly scorecards, you will provide leadership with a single, reliable view of remediation progress and risk exposure.

This is a highly visible and influential role, combining governance, technical literacy and stakeholder management to ensure our software estate is secure and sustainable.

Responsibilities

Technical Role Delivery

• Own and maintain a centralised catalogue of all internally developed applications, including framework versions, hosting environments, ownership, and lifecycle status
• Drive the centralisation and standardisation of code repository management and software governance practices
• Establish and manage a structured intake process for cyber and compliance requirements
• Consolidate vulnerability findings from tools such as New Relic, Tenable, and other monitoring platforms
• Translate security and compliance findings into clearly defined, prioritised backlog items within Agile workflows
• Participate in Agile ceremonies (stands-ups, reviews, retrospectives) to ensure visibility and progress of remediation tasks
• Advocate for and track a defined allocation of development capacity toward technical debt and vulnerability remediation

• Protect development teams from unstructured or reactive requests by creating a controlled and prioritised engagement model

Performance & Reporting

• Act as the primary liaison between Digital, Compliance, and Cyber teams
• Design and own structured reporting templates, dashboards, and scorecards
• Provide weekly progress updates and monthly governance scorecards to the Head of Department(s) and wider stakeholders
• Establish a single source of truth for software risk posture and remediation progress
• Clearly communicate risk exposure, remediation velocity, and technical debt reduction trends
• Reduce reactive reporting cycles by implementing consistent and predictable governance communications

• Support leadership decision-making with accurate, transparent, and actionable insights
• Deliver a long-term change program to enable Ping Identity IGA & MFA across all employee-accessed applications

Candidate Qualities & Experience

Essential Requirements

• Proven experience working within software engineering environments (Agile/DevOps)
• Strong understanding of SDLC, backlog management, and sprint planning processes
• Practical experience with vulnerability management and SAST tooling
• Ability to interpret technical risk and translate it into prioritised, actionable remediation plans
• Demonstrated ability to influence engineering teams without direct line management authority
• Experience designing and delivering structured reporting to senior stakeholders.

• Working knowledge of modern application stacks (including .NET and/or LAMP environments)

• Familiarity with cloud hosting environments and application lifecycle management

• Degree in Computer Science, Information Technology, Cyber Security, or related discipline

Highly Desirable Qualities

• Experience centralising code repositories and driving engineering standards across multiple teams
• Exposure to multi-entity or acquisition-led environments with fragmented technology estates
• Experience engaging with Cyber Security and Compliance stakeholders
• Experience building governance dashboards or automated reporting metrics
• Exposure to SSO and IGA rollout projects (preferably Ping Identity)
• Relevant professional certifications, such as:
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Security Manager (CISM)
  • Agile/Scrum certifications
  • ITIL (Service Management)

Personal Attributes

• Structured and disciplined thinker who brings order to complex environments
• Pragmatic and commercially aware, balancing risk reduction with business value delivery
• Calm and credible under pressure, able to manage competing stakeholder demand
• Confident communicator who can translate technical detail into executive-level clarity
• Resilient and assertive when protecting engineering capacity
• Naturally collaborative, building trust across Development, Cyber, Compliance, and Leadership teams

• Outcome-focused, with a bias toward measurable progress and continuous improvement

Not the right fit? Create an account to set up email alerts as new job postings become available that meet your interest!

Alliance Automotive Group is an equal opportunities employer.