Principal - Secure Procurement Leader

About the role

This senior role ensures that all third-party hardware, software, firmware, and services integrated into GE Vernova commercial products meet security requirements aligned with ISA/IEC 62443 supply chain standards.

Responsibilities

• Develop supplier security requirements, policies, and contractual cybersecurity obligations aligned with ISA/IEC 62443-2-4 and 62443-2-1.
• Conduct supplier cybersecurity assessments and audits, including questionnaires, remote reviews, and on-site evaluations.
• Track supplier cybersecurity risks, remediation actions, and compliance status.
• Embed cybersecurity requirements into RFPs, contracts, and supplier qualification processes.
• Maintain a cybersecurity-focused Approved Supplier List and reassessment process.
• Drive SBOM adoption and manage open-source software risk.
• Coordinate vulnerability response for supplier-provided components in the field.
• Deliver supplier risk reporting and executive metrics.
• Monitor supply chain threats and relevant regulations.
• Represent GE Vernova in industry forums and standards groups.
• Mentor team members on secure procurement and IEC 62443 practices.

Requirements

• Bachelor’s degree or equivalent experience.
• 8+ years of experience in cybersecurity, supply chain security, product security, or third-party risk management in an OT/ICS environment.
• Strong knowledge of ISA/IEC 62443, especially 62443-2-4 and 62443-2-1.
• Experience running supplier security assessment programs and managing remediation.
• Familiarity with SBOMs, SCA tools, and OSS risk management.
• Experience integrating cybersecurity into procurement, sourcing, and contract processes.
• Knowledge of relevant regulations and standards, including NERC CIP-013, CMMC, NIS2, EU Cyber Resilience Act, and NDAA Section 889.
• Strong communication and stakeholder management skills.

Qualifications

• Direct experience with IEC 62443-2-4 in OT/ICS manufacturing (desired).
• Experience using AI/ML for supplier risk, monitoring, or SBOM analysis (desired).
• Knowledge of GE Vernova or similar industrial product ecosystems (desired).
• Experience with firmware security, counterfeit component detection, and hardware supply chain integrity (desired).
• Global supplier management experience (desired).
• Relevant certifications such as CISSP, CISM, GICSP, CSSLP, or ISA/IEC 62443 certification (desired).

Skills

• Strong communication and stakeholder management skills.

Benefits

• Medical, dental, vision, and prescription drug coverage.
• Access to Health Coach from GE Vernova, a 24/7 nurse-based resource.
• Access to the Employee Assistance Program, providing 24/7 confidential assessment, counseling and referral services.
• Retirement benefits including the GE Vernova Retirement Savings Plan, a tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions, as well as access to Fidelity resources and financial planning consultants.
• Tuition assistance, adoption assistance, paid parental leave, disability benefits, life insurance, 12 paid holidays, and permissive time off.

Pay

The pay range for this position is between $147,000.00 and $245,000.00. The specific pay offered may be influenced by a variety of factors, including the candidate’s experience, education, and skill set.

Schedule

This is a remote position.

Application Deadline

July 17, 2026