Skip to content
CISO Spotlights

Career profile

Mike Hanley

Vice President and Chief Information Security Officer, General Motors

Status
Role as of 9 December 2024, the date of the latest source
Appointed
December 2024
Published

Compiled 19 October 2026 from public records. Each statement below is drawn from the sources listed at the end.

As of December 2024, Mike Hanley is the Vice President and Chief Information Security Officer of General Motors, a role he began that month after the automaker hired him as its CISO. At General Motors, Hanley holds the title of vice president and chief information security officer.

Career path

Hanley's early security career included several years at CERT/CC, where he worked as a Senior Member of the Technical Staff and security researcher on applied research and development programs for the United States Department of Defense and the Intelligence Community. He later became Vice President of Security at Duo Security, building and leading the company's security research, development, and operations functions. Cisco acquired Duo Security for $2.35 billion in 2018, and Hanley led the transformation of Cisco's cloud security framework before serving as the company's Chief Information Security Officer. He served as Cisco's CISO for less than a year before moving on. In February 2021, GitHub announced it had hired Hanley as Chief Security Officer. He went on to hold the combined title of Chief Security Officer and Senior Vice President of Engineering at GitHub. General Motors hired Hanley, previously GitHub's chief technology officer, as its new Chief Information Security Officer, with the move reported during the week of December 9, 2024. Prior to GitHub, Hanley had also held leadership positions at Cisco and Duo Security.

Security remit and public statements

At GitHub, Hanley described his job as covering internal IT and corporate security, product security and platform health, governance, risk and compliance, the GitHub Security Lab, and partnering with teams to build security products. He doubled the size of GitHub's security team within his first eight months in the role and planned to add several dozen more employ

Sources

  1. 1.
    SecurityWeeksecurityweek.com · published 9 December 2024 · checked 19 October 2026 · tier B
  2. 2.
    Michigan Rossmichiganross.umich.edu · undated page · checked 19 October 2026 · tier A
  3. 3.
    The GitHub Bloggithub.blog · undated page · checked 19 October 2026 · tier A
  4. 4.
    SecurityWeeksecurityweek.com · published 24 February 2021 · checked 19 October 2026 · tier B
  5. 5.
    CSO Onlinecsoonline.com · published 8 November 2021 · checked 19 October 2026 · tier B

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.