Job Description Summary What if you could spend your days not just maintaining security programs — but reimagining how they work? As a Staff Risk Analyst within GE Vernova's Power segment Digital Technology (DT) Governance & Compliance organization, you will take direct ownership of two enterprise-level security programs and have the mandate to make them smarter, leaner, and more impactful.
This is a role for someone who gets energized by both the rigor of operational excellence and the freedom to challenge how things are done — someone who sees automation not as a future ambition, but as something they are already building today. Job Description About the Role You will own end-to-end execution of the Enterprise Vulnerability Management (EVM) and Disaster Recovery (DR) programs for the entire Power segment — while simultaneously driving process simplification, optimization, and automation, including the use of artificial intelligence (AI) agents and workflows.
Reporting directly to the Power DT Governance & Compliance Leader, you will coordinate across application teams and senior Technology and Cyber leaders, translating operational data into clear, actionable insights for leadership. Beyond EVM and DR, you will play a key role in Power DT's Governance Optimization program — a strategic initiative focused on reducing governance burden across the organization so the team can concentrate on what truly moves the needle.
Key Responsibilities Lead cyber vulnerability management — Own identification, tracking, and resolution of vulnerabilities across all Power DT applications in line with EVM and NIS2 (Network and Information Security Directive) requirements; maintain the risk register, manage escalations, drive root cause analysis, and report regularly to leadership on status and trends. Drive governance and process improvement — Contribute to the Governance Optimization program by identifying inefficiencies, redesigning processes from first principles, and deploying AI-enabled workflows to reduce manual effort and increase program maturity.
Support risk management and policy — Assist in risk assessments, document findings, and help maintain IT policies and procedures covering security, data management, and access control — keeping compliance repositories current and audit-ready. Build reporting and visibility — Develop and maintain dashboards and reports that give senior leadership a clear view of IT risk posture, compliance status, and control effectiveness; validate data integrity and support Key Performance Indicator (KPI) / Key Risk Indicator (KRI) reporting.
Enable a culture of awareness — Help develop training materials and coordinate sessions that build understanding of compliance obligations and best practices across the organization; track participation and capture feedback. Support audit readiness — Organize documentation, respond to evidence requests, and support audit coordination activities to ensure the team is consistently prepared. Who We're Looking For You are an analytical, intellectually curious problem-solver who brings both operational discipline and a genuine passion for innovation — especially at the intersection of AI, automation, and cybersecurity governance.
Required Bachelor's degree in Computer Engineering, Computer Science, Information Systems, or a related field — or 1–3 years of equivalent practical experience in Cyber, IT Audit, or a related field 1–3 years of experience with foundational knowledge of security and application controls Hands-on curiosity with AI tools and workflow automation — you build, test, and iterate, and treat automation as core to how you work Strong analytical and problem-solving skills, including the ability to support control gap identification and basic root cause analysis Clear, confident written and verbal communication skills — equally effective with technical teams and senior leadership Demonstrated ability to collaborate across functions