Job Description Summary

GE Vernova is seeking a Senior Director, Cybersecurity Product Leader to deliver best-in-class cybersecurity posture and cyber product strategy for its Electrification Software portfolio of products. As a candidate for this position, you can effortlessly transition from executive-level discussions on risk to delving into cybersecurity technology to guide our product direction. You possess a natural curiosity and keep abreast of emerging cyber trends and threats. You are unafraid to challenge existing processes and solutions while maintaining a sharp focus on business value and priorities. As a systems thinker, you excel in cross-team collaboration and thrive in navigating ambiguity. You excel in a fast-paced, technologically advanced environment and are willing to push the limits of security capabilities. You are a motivational leader who enjoys crafting a clear vision for success and dedicating time to support your teams in their work and career growth.

• Build and promote a technology-centric, risk-oriented, and data-driven strategy and roadmap for software product security, solutions, and capabilities across Electrification Software's key domains (Grid Software, Power & Energy Resources & Manufacturing).
• Lead the Secure Development Lifecycle process aligned to IEC62443 in harmony with industry, regulatory & functional requirements, to ensure the continued security posture of our software products.
• Champion secure coding practices, vulnerability management, and secure design principles.
• Collaborate closely with engineering, commercial, legal and operations teams, customers, and other key stakeholders to ensure our commercial success.
• Evaluate capabilities & solutions and choose alternatives based on threat, risk, desirability, feasibility, and viability to meet & exceed our business objectives.
• Facilitate security assessments, penetration testing, threat modeling and risk analysis for new and existing products and operational technologies, supporting the identification of product vulnerabilities specific to software and hardware.
• Stay informed about cybersecurity related industry advancements to tackle the evolving threat landscape that gives our software products a competitive edge.
• Work directly with customers on cyber posture, strategy & provide an interface to co-ordinate cyber incident management response as necessary.
• Lead build vs. buy decisions to determine the best approaches for managing business and technology risks.
• Sustain technical and risk expertise within your team and among enterprise partners.
• Foster strong relationships with stakeholders, developers, and engineers across the organization, ensuring our services meet their evolving needs.
• Work in partnership with our Cyber Governance Risk & Compliance function to ensure relevant cybersecurity processes are implemented.
• Define cybersecurity value propositions, including improvements in product security KPIs which reflect security, privacy, availability, and recoverability.
• Inspire, mentor, and lead your team to reach their highest potential.

• You have strong technical cybersecurity and analytical skills
• You can foster collaborative, open, working relationships with technology groups, customers and other stakeholders, including vendor relationships
• You have demonstrated clear communication skills and ability to interact effectively at all levels of an organization, and to influence senior management and executives (Including translating technical information based on specific audiences)
• You have experience managing multiple high-visibility and high-impact product-centric cybersecurity programs with cross-functional teams while maintaining superior results including planning, development and management of technical requirements, design, testing and deployment of security solutions
• You have operated successfully in a software product-led technology environment
• You have a passion for cybersecurity
• You foster a culture of continuous improvement, learning, and collaboration.

• Bachelor's Degree
• At least 5 years of people management experience
• At least 9 years of experience in cybersecurity
• At least 5 years of experience translating cybersecurity strategy and analysis into product related roadmaps or capabilities

• 3+ years of experience working in Energy related business with a preference for direct experience of electricity network management operations
• 3+ years of experience in public cloud security, poly-cloud and multi-cloud environments
• 3+ years of experience in cybersecurity governance and risk management