Principal – Secure Procurement Leader

🔥 57 minutes ago

🏛️ District of Columbia, Massachusetts, +1 more states – Remote

🏛️ District of Columbia – Remote 🍂 Massachusetts – Remote ⚔️ Virginia – Remote

💵 $147k - $245k / year

⏰ Full Time

🟠 Senior

🛒 Procurement

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GE Vernova

WebsiteLinkedInAll Job Openings

10,000+ employees

💼 Consulting

📦 Logistics

🏭 Manufacturing

Consulting • Logistics • Manufacturing

GE Vernova is a leader in the energy sector with over 130 years of experience, dedicated to electrifying the world while decarbonizing it. The company offers a broad portfolio of energy solutions including gas, hydro, nuclear, and wind power technologies, aimed at providing reliable, affordable, and sustainable energy. With a strong focus on innovation, GE Vernova plays a significant role in reducing the carbon footprint of global power systems and supports the transition to net-zero emissions by 2030.

📋 Description

• Own and manage GE Vernova’s Secure Procurement Program end-to-end • Develop supplier security requirements, policies, and contractual cybersecurity obligations aligned with ISA/IEC 62443-2-4 and 62443-2-1 • Conduct supplier cybersecurity assessments and audits, including questionnaires, remote reviews, and on-site evaluations • Track supplier cybersecurity risks, remediation actions, and compliance status • Embed cybersecurity requirements into RFPs, contracts, and supplier qualification processes • Maintain a cybersecurity-focused Approved Supplier List and reassessment process • Drive SBOM adoption and manage open-source software risk • Coordinate vulnerability response for supplier-provided components in the field • Deliver supplier risk reporting and executive metrics • Monitor supply chain threats and relevant regulations • Represent GE Vernova in industry forums and standards groups • Mentor team members on secure procurement and IEC 62443 practices

🎯 Requirements

• Bachelor’s degree or equivalent experience • 8+ years of experience in cybersecurity, supply chain security, product security, or third-party risk management in an OT/ICS environment • Strong knowledge of ISA/IEC 62443, especially 62443-2-4 and 62443-2-1 • Experience running supplier security assessment programs and managing remediation • Familiarity with SBOMs, SCA tools, and OSS risk management • Experience integrating cybersecurity into procurement, sourcing, and contract processes • Knowledge of relevant regulations and standards, including NERC CIP-013, CMMC, NIS2, EU Cyber Resilience Act, and NDAA Section 889 • Strong communication and stakeholder management skills

🏖️ Benefits

• medical, dental, vision, and prescription drug coverage • access to Health Coach from GE Vernova, a 24/7 nurse-based resource • access to the Employee Assistance Program, providing 24/7 confidential assessment, counseling and referral services • GE Vernova Retirement Savings Plan, a tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions • access to Fidelity resources and financial planning consultants • tuition assistance • adoption assistance • paid parental leave • disability benefits • life insurance • 12 paid holidays • permissive time off