Principal – Secure Procurement Leader

Responsibilities

• Own and manage GE Vernova’s Secure Procurement Program end-to-end
• Develop supplier security requirements, policies, and contractual cybersecurity obligations aligned with ISA/IEC 62443-2-4 and 62443-2-1
• Conduct supplier cybersecurity assessments and audits, including questionnaires, remote reviews, and on-site evaluations
• Track supplier cybersecurity risks, remediation actions, and compliance status
• Embed cybersecurity requirements into RFPs, contracts, and supplier qualification processes
• Maintain a cybersecurity-focused Approved Supplier List and reassessment process
• Drive SBOM adoption and manage open-source software risk
• Coordinate vulnerability response for supplier-provided components in the field
• Deliver supplier risk reporting and executive metrics
• Monitor supply chain threats and relevant regulations
• Represent GE Vernova in industry forums and standards groups
• Mentor team members on secure procurement and IEC 62443 practices

Requirements

• Bachelor’s degree or equivalent experience
• 8+ years of experience in cybersecurity, supply chain security, product security, or third‑party risk management in an OT/ICS environment
• Strong knowledge of ISA/IEC 62443, especially 62443-2-4 and 62443-2-1
• Experience running supplier security assessment programs and managing remediation
• Familiarity with SBOMs, SCA tools, and OSS risk management
• Experience integrating cybersecurity into procurement, sourcing, and contract processes
• Knowledge of relevant regulations and standards, including NERC CIP‑013, CMMC, NIS2, EU Cyber Resilience Act, and NDAA Section 889
• Strong communication and stakeholder management skills

Core Competencies

Demonstrates expertise in managing supplier security programs, integrating cybersecurity requirements into procurement processes, and conducting comprehensive supplier assessments in compliance with ISA/IEC 62443 standards. Strong ability to track cybersecurity risks and mentor team members in secure procurement practices.