Summary

What if you could spend your days not just maintaining security programs but reimagining how they work As a Staff Risk Analyst within GE Vernova's Power segment Digital Technology (DT) Governance Compliance organization, you will take direct ownership of two enterprise-level security programs and have the mandate to make them smarter, leaner, and more impactful.

This is a role for someone who gets energized by both the rigor of operational excellence and the freedom to challenge how things are done, someone who sees automation not as a future ambition, but as something they are already building today.

About the Role

You will own end-to-end execution of the Enterprise Vulnerability Management (EVM) and Disaster Recovery (DR) programs for the entire Power segment while simultaneously driving process simplification, optimization, and automation, including the use of artificial intelligence (AI) agents and workflows.

Reporting directly to the Power DT Governance Compliance Leader, you will coordinate across application teams and senior Technology and Cyber leaders, translating operational data into clear, actionable insights for leadership. Beyond EVM and DR, you will play a key role in Power DT's Governance Optimization program, a strategic initiative focused on reducing governance burden across the organization so the team can concentrate on what truly moves the needle.

Key Responsibilities

- Lead cyber vulnerability management Own identification, tracking, and resolution of vulnerabilities across all Power DT applications in line with EVM and NIS2 (Network and Information Security Directive) requirements; maintain the risk register, manage escalations, drive root cause analysis, and report regularly to leadership on status and trends.




- Drive governance and process improvement Contribute to the Governance Optimization program by identifying inefficiencies, redesigning processes from first principles, and deploying AI-enabled workflows to reduce manual effort and increase program maturity.
- Support risk management and policy Assist in risk assessments, document findings, and help maintain IT policies and procedures covering security, data management, and access control keeping compliance repositories current and audit-ready.
- Build reporting and visibility Develop and maintain dashboards and reports that give senior leadership a transparent view of IT risk posture, compliance status, and control effectiveness; validate data integrity and support KPI / KRI reporting.
- Enable a culture of awareness Help develop training materials and coordinate sessions that build understanding of compliance obligations and best practices across the organization; track participation and capture feedback.
- Support audit readiness Organize documentation, respond to evidence requests, and support audit coordination activities to ensure the team is consistently prepared.

Who We're Looking For You are an analytical, intellectually curious problem-solver who brings both operational discipline and a genuine passion for innovation especially at the intersection of AI, automation, and cybersecurity governance.





Required

- Bachelor's degree in Computer Engineering, Computer Science, Information Systems, or a related field or 13 years of equivalent practical experience in Cyber, IT Audit, or a related field
- 13 years of experience with foundational knowledge of security and application controls
- Hands-on curiosity with AI tools and workflow automation you build, test, and iterate, and treat automation as core to how you work
- Strong analytical and problem-solving skills, including the ability to support control gap identification and basic root cause analysis
- Clear, confident written and verbal communication skills equally effective with technical teams and senior leadership
- Demonstrated ability to collaborate across functions in a fast-paced, cross-functional environment
- Proficiency in data analysis, including Microsoft Excel; willingness to develop skills in reporting tools such as Power BI or Tableau

Preferred
- Interest in or progress toward relevant certifications such as CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), or CRISC (Certified in Risk and Information Systems Control)
- Familiarity with COBIT (Control Objectives for Information and Related Technologies) frameworks or SOX (Sarbanes-Oxley Act) compliance requirements
- Experience with dashboard development and KPI/KRI reporting in a governance or risk context

Education A formal education and subsequent Bachelor's or Master's degree in Computer Engineering, Computer Science, Information Systems, or a related discipline is nice to have, but we are most interested in your total experience and professional achievements.

📌 Senior Governance Analyst (Bengaluru)
🏢 GE Vernova
📍 Bengaluru