Principal – Secure Procurement Leader

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GE Vernova

WebsiteLinkedInAll Job Openings

10,000+ employees

💼 Consulting

📦 Logistics

🏭 Manufacturing

Consulting • Logistics • Manufacturing

GE Vernova is a leader in the energy sector with over 130 years of experience, dedicated to electrifying the world while decarbonizing it. The company offers a broad portfolio of energy solutions including gas, hydro, nuclear, and wind power technologies, aimed at providing reliable, affordable, and sustainable energy. With a strong focus on innovation, GE Vernova plays a significant role in reducing the carbon footprint of global power systems and supports the transition to net-zero emissions by 2030.

📋 Description

• Own and evolve the Secure Procurement Program end-to-end • Define supplier cybersecurity requirements, policies, and contractual obligations aligned with ISA/IEC 62443-2-4 and 62443-2-1 • Lead supplier assessments and audits, including questionnaire-based reviews, remote evaluations, and on-site assessments • Track risk findings, remediation actions, and compliance status across the supplier base • Integrate cybersecurity requirements into RFPs, contracts, and supplier qualification workflows • Maintain a cybersecurity-focused Approved Supplier List • Drive SBOM adoption and open-source risk management • Use SCA tools to identify and mitigate open-source software risk • Coordinate vulnerability response for supplier-provided components in the field • Produce executive-level supplier risk reporting • Monitor supply chain threats and emerging regulations • Represent GE Vernova in industry forums and standards bodies • Mentor colleagues on secure procurement practices and ISA/IEC 62443 standards • Partner with product engineering, sourcing, legal, and Vulnerability Operations teams

🎯 Requirements

• Bachelor's degree in Cybersecurity, Engineering, Information Technology, or a related field — or equivalent professional experience • Significant years of experience in cybersecurity, supply chain security, product security, or third-party risk management within OT/ICS environments • Strong working knowledge of ISA/IEC 62443, particularly the 62443-2-4 and 62443-2-1 standards • Experience running supplier security assessment programs and managing remediation pipelines • Familiarity with SBOMs, SCA tools, and open-source software risk management • Experience integrating cybersecurity requirements into procurement, sourcing, and contract processes • Working knowledge of NERC CIP-013, CMMC, NIS2, the EU Cyber Resilience Act, and NDAA Section 889 • Legally authorized to work in the United States • Preferred: direct experience applying IEC 62443-2-4 in OT/ICS manufacturing environments • Preferred: experience using AI/ML tools for supplier risk monitoring or SBOM analysis • Preferred: background in firmware security, counterfeit component detection, or hardware supply chain integrity • Preferred: global supplier management experience across multiple regions or regulatory jurisdictions • Preferred: relevant certifications such as CISSP, CISM, GICSP, CSSLP, or an ISA/IEC 62443 certification • Any offer of employment is conditioned upon successful completion of a drug screen, as applicable

🏖️ Benefits

• Healthcare coverage: medical, dental, vision, and prescription drug coverage • Health Coach from GE Vernova, a 24/7 nurse-based resource • Employee Assistance Program with 24/7 confidential assessment, counseling and referral services • GE Vernova Retirement Savings Plan • Tax-advantaged 401(k) savings opportunity with company matching contributions • Company retirement contributions • Fidelity resources and financial planning consultants • Tuition assistance • Adoption assistance • Paid parental leave • Disability benefits • Life insurance • 12 paid holidays • Permissive time off • Professional development • Flexible work options • Discretionary annual bonus • Competitive compensation