Cyber and Compliance Director

GE Vernova

. Set and execute the Wind cybersecurity strategy, roadmap, governance model, and risk priorities .

Posted 9/28/2026full-timeUnited StatesLead💰 $145,400 - $242,400 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and executing cybersecurity strategies, governance, and compliance across operational technology and critical infrastructure. Proven ability to lead incident response programs, enhance threat readiness, and foster a culture of security ownership and collaboration.

Highest-signal resume keywords

Cybersecurity Strategy DevelopmentIncident Response LeadershipCybersecurity Compliance ManagementOperational Technology CybersecurityExecutive Communication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity GovernanceRisk ManagementVulnerability ManagementData SecurityCloud SecurityIdentity and Access ManagementNERC CIP ComplianceISO 27001 KnowledgeNIST Cybersecurity FrameworkOperational Technology Security

Soft Skills

Stakeholder ManagementProgram LeadershipInfluencing SkillsSound JudgmentCollaboration

Certifications & Qualifications

CISSPCISMCRISCGICSPGSLC

Industry Keywords

EnergyUtilitiesRenewable EnergyIndustrial ManufacturingCritical Infrastructure

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Set and execute the Wind cybersecurity strategy, roadmap, governance model, and risk priorities
Champion security-by-design across digital products, enterprise applications, data platforms, AI solutions, cloud services, and operational technology
Lead the Wind cyber incident response program, including playbooks, escalation paths, executive communications, recovery planning, and continuous improvement
Strengthen threat readiness through tabletop exercises, response reviews, metrics, and coordination with enterprise security and business teams
Lead cybersecurity compliance, controls, and remediation across SOX, NERC CIP, ISO 27001, critical infrastructure requirements, audits, and customer commitments
Provide visibility to cyber risk, compliance health, control ownership, executive reporting, and third-party security expectations
Guide cybersecurity strategy for Wind operational technology, field systems, remote operations, connected assets, and critical operational platforms
Reduce OT and IT risk through asset visibility, remote access controls, vulnerability management, segmentation, resilience, and recovery planning
Build and lead a business-focused Wind cybersecurity capability with clear roles, operating model, staffing plans, and delivery partnerships
Develop cyber talent and foster security ownership, accountability, collaboration, and practical risk management

Requirements

What you’ll need

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, or equivalent professional experience
5-8 years of progressive experience in cybersecurity, technology risk, compliance, operational technology, or related technology leadership roles
At least 2 years of experience leading cybersecurity strategy, governance, risk management, or compliance programs in a complex enterprise environment, including audit, controls and regulatory experience
Experience leading or coordinating cybersecurity incident response, including executive communications, escalation management, and recovery planning
Strong executive communication, sound judgment, stakeholder management, and program leadership skills
Ability to influence stakeholders and leadership
Industry experience in energy, utilities, renewable energy, industrial manufacturing, or critical infrastructure
2 years of experience with operational technology or industrial control system cybersecurity
Working knowledge of NERC CIP, SOX technology controls, ISO 27001, NIST Cybersecurity Framework, or comparable control frameworks
Familiarity with cloud security, identity and access management, data security, AI security, and security architecture
Relevant certifications such as CISSP, CISM, CRISC, GICSP, or GSLC, or equivalent

Benefits

Comp & perks

Discretionary annual bonus
Medical, dental, vision, and prescription drug coverage
Health Coach from GE Vernova, a 24/7 nurse-based resource
Employee Assistance Program with 24/7 confidential assessment, counseling and referral services
GE Vernova Retirement Savings Plan
Tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions
Access to Fidelity resources and financial planning consultants
Tuition assistance
Adoption assistance
Paid parental leave
Disability benefits
Life insurance
12 paid holidays
Permissive time off
Professional development
Relocation assistance not provided