Job Description Summary

GE Vernova is seeking an experienced and technically grounded Senior Director to lead the Secure Development & Supply Chain function within the Product Cybersecurity organization. This HQ-based role reports directly to the VP of Product Cybersecurity, forming a critical pillar of GE Vernova’s enterprise product security leadership team.

This role carries dual ownership: governance and guidance of the Secure Development Lifecycle (SDL) process across GE Vernova’s business units, anchored in IEC 62443-4-1 practices; and leadership of the secure procurement function. Together, these responsibilities ensure that cybersecurity is built into GE Vernova’s products from the earliest stages of development and extends through the supply chain relationships that underpin every product and service the company delivers.

The ideal candidate is a practitioner-leader with deep expertise in product security engineering and supply chain security, a strong command of IEC 62443 secure development requirements, and the organizational influence to drive SDL adoption across diverse, complex business units. Critically, this leader must bring an AI-forward mindset—actively seeking opportunities to embed intelligent tooling and automation into SDL processes, supply chain evaluation, and guidance delivery to accelerate business unit capability and scale the function’s impact. Embracing AI as a force multiplier in this role is a core expectation, not an option. This leader sets the standard for how GE Vernova builds secure products and how it expects its suppliers and partners to do the same.

Job Description

Key Responsibilities:

• Own and govern GE Vernova’s Secure Development Lifecycle (SDL) framework, including enterprise policies, standards, and guidance aligned to IEC 62443-4-1.
• Lead a centralized SDL advisory service providing threat modeling, secure design reviews, and risk assessment support to business units.
• Use AI-enabled tools to scale SDL governance, maturity tracking, and policy guidance.
• Oversee the secure procurement function, including supplier cybersecurity assessments, third-party risk reviews, and procurement security guidance.
• Define and maintain cybersecurity requirements for suppliers, vendors, and third-party software providers across the product supply chain.
• Serve as the HQ authority on product security engineering and supply chain security practices.
• Partner with business unit and engineering leaders to drive consistent adoption of SDL and supply chain standards.
• Promote AI and automation to improve product security workflows and reduce manual compliance effort.
• Coordinate with Commercial & Regulatory Services to support customer, regulatory, and external compliance responses.

Required qualifications 

• 10+ years of progressive cybersecurity experience, including product security engineering, secure development lifecycle, and supply chain security.
• Expertise in IEC 62443-4-1 and related IEC 62443 requirements.
• Experience designing and governing SDL or equivalent product security programs in complex, matrixed organizations.
• Experience leading supply chain cybersecurity, supplier assessments, and third-party risk management.
• Experience leading technical teams and influencing across functions.
• Experience in GE Vernova or comparable power generation, wind, grid, or electrification environments.
• Strong cross-functional communication and stakeholder management skills.
• Bachelor’s degree in a technical field.

Preferred

• Experience with GE Vernova or similar OT / industrial energy systems.
• Familiarity with IEC 62443-4-2, IEC 62443-2-4, and EU Cyber Resilience Act requirements.
• Experience building centralized product security engineering functions.
• Relevant certifications such as CISSP, CSSLP, GICSP, or IEC 62443 credentials.
• Advanced degree in a related technical field.

Additional Information