Job Description Summary

GE Vernova is seeking a seasoned Principal Cybersecurity Regulatory Advisor to serve as the organization's primary subject matter expert on commercial product cybersecurity regulation. Operating within the Commercial & Regulatory Services function, this senior individual contributor role provides analysis and advisory support to empower business units to make informed, confident compliance decisions.

You will act as an internal expert translating complex global regulations into actionable, business-contextualized guidance. This high-autonomy role directly influences the regulatory readiness of GE Vernova’s Power, Wind, and Electrification product portfolios.

Job Description

Key Responsibilities

• Regulatory Interpretation: Act as the primary expert on cybersecurity regulations, including the EU Cyber Resilience Act (EU CRA), NERC CIP, SOCI and others.
• Business Advisory: Translate regulatory obligations into practical requirements for commercial product design, manufacturing, and support services.
• Readiness Support: Lead regulatory gap analyses and provide remediation guidance for product teams and compliance stakeholders.
• Strategic Briefing: Prepare advisory briefs for executive stakeholders regarding regulatory proposals, industry trends, and enforcement actions.
• External Engagement: Provide subject matter expertise for high-stakes customer-facing regulatory discussions.
• Knowledge Management: Maintain a centralized regulatory knowledge base and contribute to the development of AI-assisted regulatory analysis tools.

Qualifications

• Experience: 10+ years in cybersecurity, with a focus on regulatory compliance, policy interpretation, or standards work within the industrial or energy sector.
• Domain Expertise: Deep knowledge of at least two of the following: EU CRA, NERC CIP, NIS2, or IEC 62443.
• Analytical Rigor: Proven ability to interpret complex legal texts and translate them into actionable engineering and commercial guidance.
• Product Domain Expertise OT/ICS: 10+ years of experience with operational technology, ICS, SCADA, or industrial energy management systems.
• Communication: Exceptional ability to produce authoritative documentation and executive-level briefings.
• Education: Bachelor’s degree in Cybersecurity, Engineering, Computer Science, Law, or a related discipline.

Preferred Qualifications

• Active participation in industry regulatory bodies 
• Experience with EU product certification (CE marking, UL marking & other Notified Bodies) or conformity assessments.
• Professional certifications (e.g., GICSP, CISSP, CISM, ISA/IEC 62443).
• Advanced degree (JD, LL.M., or Master’s in Cybersecurity, Engineering, or Policy).
   

Additional Information

#LI-Remote - This is a remote position