Principal Cybersecurity Regulatory Advisor
Job Summary
GE Vernova is seeking a Principal Cybersecurity Regulatory Advisor to act as the primary subject matter expert on commercial product cybersecurity regulation. This role involves translating complex global regulations into actionable guidance for product portfolios including Power, Wind, and Electrification. The advisor will provide high-level analysis and support to ensure business units remain compliant with international standards.
Responsibilities
- Interpret global cybersecurity regulations (EU CRA, NERC CIP, etc.)
- Provide actionable compliance guidance for product design
- Lead regulatory gap analyses and remediation efforts
- Prepare strategic briefings for executive stakeholders
Required Skills
- 10+ years in cybersecurity regulatory compliance
- Expertise in OT, ICS, SCADA, and energy systems
- Deep knowledge of EU CRA, NERC CIP, or IEC 62443
- Strong analytical and technical writing skills
Job Details
Key Responsibilities:
- Regulatory Interpretation: Act as the primary expert on cybersecurity regulations, including the EU Cyber Resilience Act (EU CRA), NERC CIP, SOCI and others.
- Business Advisory: Translate regulatory obligations into practical requirements for commercial product design, manufacturing, and support services.
- Readiness Support: Lead regulatory gap analyses and provide remediation guidance for product teams and compliance stakeholders.
- Strategic Briefing: Prepare advisory briefs for executive stakeholders regarding regulatory proposals, industry trends, and enforcement actions.
- External Engagement: Provide subject matter expertise for high-stakes customer-facing regulatory discussions.
- Knowledge Management: Maintain a centralized regulatory knowledge base and contribute to the development of AI-assisted regulatory analysis tools.
Qualifications:
- Experience: 10+ years in cybersecurity, with a focus on regulatory compliance, policy interpretation, or standards work within the industrial or energy sector.
- Domain Expertise: Deep knowledge of at least two of the following: EU CRA, NERC CIP, NIS2, or IEC 62443.
- Analytical Rigor: Proven ability to interpret complex legal texts and translate them into actionable engineering and commercial guidance.
- Product Domain Expertise OT/ICS: 10+ years of experience with operational technology, ICS, SCADA, or industrial energy management systems.
- Communication: Exceptional ability to produce authoritative documentation and executive-level briefings.
- Education: Bachelor's degree in Cybersecurity, Engineering, Computer Science, Law, or a related discipline.
Preferred Qualifications:
- Active participation in industry regulatory bodies.
- Experience with EU product certification (CE marking, UL marking & other Notified Bodies) or conformity assessments.
- Professional certifications (e.g., GICSP, CISSP, CISM, ISA/IEC 62443).
- Advanced degree (JD, LL.M., or Master's in Cybersecurity, Engineering, or Policy).