Job Description SummaryWhat if you could spend your days not just maintaining security programs — but reimagining how they work? As a Staff Risk Analyst within GE Vernova's Power segment Digital Technology (DT) Governance & Compliance organization, you will take direct ownership of two enterprise-level security programs and have the mandate to make them smarter, leaner, and more impactful.
This is a role for someone who gets energized by both the rigor of operational excellence and the freedom to challenge how things are done — someone who sees automation not as a future ambition, but as something they are already building today.
Job DescriptionAbout the Role
You will own end-to-end execution of the Enterprise Vulnerability Management (EVM) and Disaster Recovery (DR) programs for the entire Power segment — while simultaneously driving process simplification, optimization, and automation, including the use of artificial intelligence (AI) agents and workflows.
Reporting directly to the Power DT Governance & Compliance Leader, you will coordinate across application teams and senior Technology and Cyber leaders, translating operational data into clear, actionable insights for leadership. Beyond EVM and DR, you will play a key role in Power DT's Governance Optimization program — a strategic initiative focused on reducing governance burden across the organization so the team can concentrate on what truly moves the needle.
Key Responsibilities
- Lead cyber vulnerability management — Own identification, tracking, and resolution of vulnerabilities across all Power DT applications in line with EVM and NIS2 (Network and Information Security Directive) requirements; maintain the risk register, manage escalations, drive root cause analysis, and report regularly to leadership on status and trends.
- Drive governance and process improvement — Contribute to the Governance Optimization program by identifying inefficiencies, redesigning processes from first principles, and deploying AI-enabled workflows to reduce manual effort and increase program maturity.
- Support risk management and policy — Assist in risk assessments, document findings, and help maintain IT policies and procedures covering security, data management, and access control — keeping compliance repositories current and audit-ready.
- Build reporting and visibility — Develop and maintain dashboards and reports that give senior leadership a clear view of IT risk posture, compliance status, and control effectiveness; validate data integrity and support Key Performance Indicator (KPI) / Key Risk Indicator (KRI) reporting.
- Enable a culture of awareness — Help develop training materials and coordinate sessions that build understanding of compliance obligations and best practices across the organization; track participation and capture feedback.
- Support audit readiness — Organize documentation, respond to evidence requests, and support audit coordination activities to ensure the team is consistently prepared.
Who We're Looking For
You are an analytical, intellectually curious problem-solver who brings both operational discipline and a genuine passion for innovation — especially at the intersection of AI, automation, and cybersecurity governance.
Required
- Bachelor's degree in Computer Engineering, Computer Science, Information Systems, or a related field — or 1–3 years of equivalent practical experience in Cyber, IT Audit, or a related field
- 1–3 years of experience with foundational knowledge of security and application controls
- Hands-on curiosity with AI tools and workflow automation — you build, test, and iterate, and treat automation as core to how you work
- Strong analytical and problem-solving skills, including the ability to support control gap identification and basic root cause analysis
- Clear, confident written and verbal communication skills — equally effective with technical teams and senior leadership
- Demonstrated ability to collaborate across functions in a fast-paced, cross-functional environment
- Proficiency in data analysis, including Microsoft Excel; willingness to develop skills in reporting tools such as Power BI or Tableau
Preferred
- Interest in or progress toward relevant certifications such as CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), or CRISC (Certified in Risk and Information Systems Control)
- Familiarity with COBIT (Control Objectives for Information and Related Technologies) frameworks or SOX (Sarbanes-Oxley Act) compliance requirements
- Experience with dashboard development and KPI/KRI reporting in a governance or risk context
Education
A formal education and subsequent Bachelor's or Master's degree in Computer Engineering, Computer Science, Information Systems, or a related discipline is nice to have, but we are most interested in your total experience and professional achievements.
