Alliance Automotive Group UK & Ireland
Software Standards Manager
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Alliance Automotive Group (AAG)
Alliance Automotive Group (AAG) is a leading distributor of passenger and commercial vehicle parts to the independent automotive aftermarket in Europe. It operates in France, the U.K., Ireland, Germany, the Netherlands, Belgium, Spain, Portugal, Poland, Hungary, and Romania. The company is a wholly-owned subsidiary of Genuine Parts Company (GPC), the largest global automotive replacement parts distributor with activities in North America, Europe, and Australasia. AAG’s network serves thousands of customers across Europe supported by a logistics infrastructure of 75 Distribution Centres, approximately 2,550 Stores, and thousands of vehicle repairers, body shops, and auto-centres. AAG has a revenue of 3.4 billion euros with over 17,000 employees. Learn more at www.allianceautomotivegroup.eu.
The Software Standards Manager
The Software Standards Manager is a new role within Alliance Automotive UK & Ireland, reporting to the Head of Digital & Internal Applications. Operating across both B2B, B2C, and internal technology teams, this role exists to bring structure, visibility, and control to a diverse and evolving software landscape shaped by organic and acquisition growth.
With multiple homegrown and proprietary applications primarily built on.NET and LAMP stacks, our engineering teams have historically operated with autonomy in tooling, frameworks, and processes. As we continue to scale, we must now centralise standards around source code management, vulnerability remediation, technical debt allocation, and risk reporting—without disrupting the pace of business value delivery.
The Software Standards Manager acts as the bridge between delivery-focused development teams and compliance, cyber, and risk stakeholders. This role protects engineering capacity by creating a structured intake and prioritisation model for security and compliance requests, ensuring they are logged, translated into backlog items, and progressed in a measurable way.
You will own the catalogue of internally developed applications, maintain visibility of framework lifecycle status, and oversee vulnerability posture across SAST and monitoring tools such as New Relic and Tenable. Through clear weekly reporting and monthly scorecards, you will provide leadership with a single, reliable view of remediation progress and risk exposure.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
This is a highly visible and influential role, combining governance, technical literacy, and stakeholder management to ensure our software estate is secure and sustainable.
Responsibilities
Technical Role Delivery
- Own and maintain a centralised catalogue of all internally developed applications, including framework versions, hosting environments, ownership, and lifecycle status
- Drive the centralisation and standardisation of code repository management and software governance practices
- Establish and manage a structured intake process for cyber and compliance requirements
- Consolidate vulnerability findings from tools such as New Relic, Tenable, and other monitoring platforms
- Translate security and compliance findings into clearly defined, prioritised backlog items within Agile workflows
- Participate in Agile ceremonies (stands-ups, reviews, retrospectives) to ensure visibility and progress of remediation tasks
- Advocate for and track a defined allocation of development capacity toward technical debt and vulnerability remediation
- Protect development teams from unstructured or reactive requests by creating a controlled and prioritised engagement model
Performance & Reporting
- Act as the primary liaison between Digital, Compliance, and Cyber teams
- Design and own structured reporting templates, dashboards, and scorecards
- Provide weekly progress updates and monthly governance scorecards to the Head of Department(s) and wider stakeholders
- Establish a single source of truth for software risk posture and remediation progress
- Clearly communicate risk exposure, remediation velocity, and technical debt reduction trends
- Reduce reactive reporting cycles by implementing consistent and predictable governance communications
- Support leadership decision-making with accurate, transparent, and actionable insights
- Deliver a long-term change program to enable Ping Identity IGA & MFA across all employee-accessed applications
Essential Requirements
Candidate Qualities & Experience
- Proven experience working within software engineering environments (Agile/DevOps)
- Strong understanding of SDLC, backlog management, and sprint planning processes
- Practical experience with vulnerability management and SAST tooling
- Ability to interpret technical risk and translate it into prioritised, actionable remediation plans
- Demonstrated ability to influence engineering teams without direct line management authority
- Experience designing and delivering structured reporting to senior stakeholders.
- Working knowledge of modern application stacks (including.NET and/or LAMP environments)
- Familiarity with cloud hosting environments and application lifecycle management
- Degree in Computer Science, Information Technology, Cyber Security, or related discipline
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Highly Desirable Qualities
- Experience centralising code repositories and driving engineering standards across multiple teams
- Exposure to multi-entity or acquisition-led environments with fragmented technology estates
- Experience engaging with Cyber Security and Compliance stakeholders
- Experience building governance dashboards or automated reporting metrics
- Exposure to SSO and IGA rollout projects (preferably Ping Identity)
- Relevant professional certifications, such as:
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- Agile/Scrum certifications
- ITIL (Service Management)
Personal Attributes
- Structured and disciplined thinker who brings order to complex environments
- Pragmatic and commercially aware, balancing risk reduction with business value delivery
- Calm and credible under pressure, able to manage competing stakeholder demand
- Confident communicator who can translate technical detail into executive-level clarity
- Resilient and assertive when protecting engineering capacity
- Naturally collaborative, building trust across Development, Cyber, Compliance, and Leadership teams
- Outcome-focused, with a bias toward measurable progress and continuous improvement
Not the right fit? Create an account to set up email alerts as new job postings become available that meet your interest!
Alliance Automotive Group is an equal opportunities employer.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London