Cyber and Compliance Director

GE Vernova

. Establish and drive the Wind business cybersecurity strategy, governance, compliance, and incident response capabilities .

Posted 9/28/2026full-timeUnited StatesLead💰 $145,400 - $242,400 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in establishing and driving cybersecurity strategy, governance, and compliance within the Wind business, with a strong focus on incident response and operational technology. Proven ability to lead cross-functional collaboration and develop cyber talent while managing risk and ensuring regulatory compliance.

Highest-signal resume keywords

Cybersecurity Strategy LeadershipIncident Response CoordinationRegulatory Compliance ManagementOperational Technology CybersecurityExecutive Communication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity GovernanceRisk ManagementIncident ResponseVulnerability ManagementCloud SecurityData SecurityIdentity and Access ManagementNERC CIP ComplianceISO 27001 KnowledgeNIST Cybersecurity Framework Familiarity

Soft Skills

Stakeholder ManagementProgram LeadershipSound JudgmentCollaborationAccountability

Certifications & Qualifications

CISSPCISMCRISCGICSPGSLC

Industry Keywords

EnergyUtilitiesRenewable EnergyIndustrial ManufacturingCritical Infrastructure

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Establish and drive the Wind business cybersecurity strategy, governance, compliance, and incident response capabilities
Serve as the primary cybersecurity partner for Wind Digital Technology
Collaborate with Wind Product Cybersecurity, GE Vernova Enterprise Cybersecurity, Engineering, Services, Operational Technology, Compliance, Legal, Audit, and business leadership
Set and execute the Wind cybersecurity strategy, roadmap, governance model, and risk priorities
Champion security-by-design across digital products, enterprise applications, data platforms, AI solutions, cloud services, and operational technology
Lead the Wind cyber incident response program, including playbooks, escalation paths, executive communications, recovery planning, and continuous improvement
Strengthen threat readiness through tabletop exercises, response reviews, metrics, and coordination with enterprise security and business teams
Lead cybersecurity compliance, controls, and remediation across SOX, NERC CIP, ISO 27001, critical infrastructure requirements, audits, and customer commitments
Provide visibility to cyber risk, compliance health, control ownership, executive reporting, and third-party security expectations
Guide cybersecurity strategy for Wind operational technology, field systems, remote operations, connected assets, and critical operational platforms
Reduce OT and IT risk through asset visibility, remote access controls, vulnerability management, segmentation, resilience, and recovery planning
Build and lead a business-focused Wind cybersecurity capability with clear roles, operating model, staffing plans, and delivery partnerships
Develop cyber talent and foster security ownership, accountability, collaboration, and practical risk management

Requirements

What you’ll need

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, or equivalent professional experience
5-8 years of progressive experience in cybersecurity, technology risk, compliance, operational technology, or related technology leadership roles
At least 2 years of experience leading cybersecurity strategy, governance, risk management, or compliance programs in a complex enterprise environment, including audit, controls and regulatory experience
Experience leading or coordinating cybersecurity incident response, including executive communications, escalation management, and recovery planning
Strong executive communication, sound judgment, stakeholder management, and program leadership skills
Industry experience in energy, utilities, renewable energy, industrial manufacturing, or critical infrastructure
2 years of experience with operational technology or industrial control system cybersecurity
Working knowledge of NERC CIP, SOX technology controls, ISO 27001, NIST Cybersecurity Framework, or comparable control frameworks
Familiarity with cloud security, identity and access management, data security, AI security, and security architecture
Relevant certifications such as CISSP, CISM, CRISC, GICSP, GSLC, or equivalent
Legally authorized to work in the United States

Benefits

Comp & perks

Discretionary annual bonus
Medical, dental, vision, and prescription drug coverage
Health Coach access with a 24/7 nurse-based resource
Employee Assistance Program with 24/7 confidential assessment, counseling and referral services
GE Vernova Retirement Savings Plan
Tax-advantaged 401(k) savings opportunity with company matching contributions
Company retirement contributions
Fidelity resources and financial planning consultants
Tuition assistance
Adoption assistance
Paid parental leave
Disability benefits
Life insurance
12 paid holidays
Permissive time off
Professional development opportunities
Relocation assistance not provided