Principal – Secure Procurement Leader

Switzerland Global Enterprise

Principal- Secure Procurement Leader overseeing the Secure Procurement Program. Collaborating with cross-functional teams to ensure cybersecurity compliance in GE Vernova's commercial products.

Posted 7/3/2026full-timeRemote • District of Columbia, Massachusetts, Virginia • 🇺🇸 United StatesSenior💰 $147,000 - $245,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing supplier security programs, integrating cybersecurity requirements into procurement processes, and conducting comprehensive supplier assessments in compliance with ISA/IEC 62443 standards. Strong ability to track cybersecurity risks and mentor team members in secure procurement practices.

Highest-signal resume keywords

Supplier Security ManagementISA/IEC 62443 KnowledgeCybersecurity Risk AssessmentSBOM AdoptionStakeholder Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecuritySupply Chain SecurityThird-Party Risk ManagementSupplier Security AssessmentRemediation ManagementCybersecurity IntegrationSourcing ProcessesContract ProcessesOpen-Source Software Risk ManagementVulnerability Response

Soft Skills

Strong CommunicationStakeholder ManagementMentoring

Tools & Technologies

SCA ToolsSBOMs

Industry Keywords

NERC CIP-013CMMCNIS2EU Cyber Resilience ActNDAA Section 889OT/ICS Environment

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Own and manage GE Vernova’s Secure Procurement Program end-to-end
Develop supplier security requirements, policies, and contractual cybersecurity obligations aligned with ISA/IEC 62443-2-4 and 62443-2-1
Conduct supplier cybersecurity assessments and audits, including questionnaires, remote reviews, and on-site evaluations
Track supplier cybersecurity risks, remediation actions, and compliance status
Embed cybersecurity requirements into RFPs, contracts, and supplier qualification processes
Maintain a cybersecurity-focused Approved Supplier List and reassessment process
Drive SBOM adoption and manage open-source software risk
Coordinate vulnerability response for supplier-provided components in the field
Deliver supplier risk reporting and executive metrics
Monitor supply chain threats and relevant regulations
Represent GE Vernova in industry forums and standards groups
Mentor team members on secure procurement and IEC 62443 practices

Requirements

What you’ll need

Bachelor’s degree or equivalent experience
8+ years of experience in cybersecurity, supply chain security, product security, or third-party risk management in an OT/ICS environment
Strong knowledge of ISA/IEC 62443, especially 62443-2-4 and 62443-2-1
Experience running supplier security assessment programs and managing remediation
Familiarity with SBOMs, SCA tools, and OSS risk management
Experience integrating cybersecurity into procurement, sourcing, and contract processes
Knowledge of relevant regulations and standards, including NERC CIP-013, CMMC, NIS2, EU Cyber Resilience Act, and NDAA Section 889
Strong communication and stakeholder management skills

Benefits

Comp & perks

medical, dental, vision, and prescription drug coverage
access to Health Coach from GE Vernova, a 24/7 nurse-based resource
access to the Employee Assistance Program, providing 24/7 confidential assessment, counseling and referral services
GE Vernova Retirement Savings Plan, a tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions
access to Fidelity resources and financial planning consultants
tuition assistance
adoption assistance
paid parental leave
disability benefits
life insurance
12 paid holidays
permissive time off