GE Vernova · 18 hours ago
Principal Cyber Risk Advisor, Cybersecurity M&A
GE Vernova is focused on cybersecurity in the context of mergers and acquisitions, seeking a Principal Cyber Risk Advisor to lead due diligence and integration efforts. The role involves quantifying cyber risks, ensuring control readiness, and managing cross-functional teams to drive successful outcomes in M&A transactions.
EnergyEnergy EfficiencySustainability
Responsibilities
Lead pre-sign red-flag and full due diligence for GE Vernova's Deal Processes in DT and OT/ICS targets aligned to NIST CSF, SP 800-53/800-171, and 800-82
Quantify risk and remediation (capex/opex, timeline) and translate into valuation, PPAs, holdbacks, R&Ws/indemnities, and closing conditions
Own Day 1 control readiness; build and execute 30/60/100-day plans and drive TSA exit milestones
Develop and run standard playbooks for IAM/PAM, network segmentation/zero trust, endpoint/EDR, cloud tenancy/landing zones, app security, data discovery/classification/transfer, logging/SIEM, vulnerability management, third-party risk, IR, and BCP/DR
Design/govern safe OT/ICS integration and segmentation strategies; assess NERC CIP applicability and compliance contours
Establish clean-room protocols and data handling standards; ensure privacy and cross-border compliance (e.g., DPIAs)
Operate in a matrix with DT M&A/PMO, Business Development, Legal, Privacy, Finance, Insurance, Sourcing, and BU security; lead cross-functional squads
Manage third-party providers for surge capacity/testing/regulatory advisory; integrate and QA outputs
Track and report KPIs (flow efficiency, diligence cycle time, Day 1 control coverage, TSA months saved, post-close findings); drive continuous improvement
Provide executive-ready risk narratives, options/trade-offs, and recommendations under tight timelines
Qualification
Required
10+ years in cybersecurity with significant M&A diligence and integration/separation leadership
Experience across IT and OT/ICS security, including segmentation and operational resilience
Deep knowledge of NIST CSF, SP 800-53/800-171, and 800-82; familiarity with NERC CIP
Proven ability to quantify risk/remediation and translate into deal economics and SPA/TSA language
Track record delivering Day 1 readiness and 30/60/100-day execution with TSA exits in global environments
Hands-on depth in IAM/PAM, network/cloud security, endpoint/EDR, data protection, logging/monitoring, vuln mgmt, third-party risk, IR, and BCP/DR
Executive communication and matrix leadership; ability to lead external advisors
Bachelor's degree in cybersecurity, computer science, engineering, or related field (or equivalent experience)
Location: Flexible US; hybrid/remote options based on candidate location
Travel: Some Domestic and international, as required
Preferred
OT-heavy transaction experience (generation, grid, renewables); prior clean-room design/operations
Risk quantification (e.g., FAIR or equivalent); Lean/Agile/PMO experience with metrics focus
Experience improving cyber insurance submissions and influencing SPA/TSA controls
Relevant certifications: CISSP, CISM, CRISC, CISA, GICSP, CCSK/CCSP, cloud provider certs
Benefits
Medical
Dental
Vision
Prescription drug coverage
Access to Health Coach from GE Vernova
24/7 nurse-based resource
Access to the Employee Assistance Program
Providing 24/7 confidential assessment, counseling and referral services
GE Vernova Retirement Savings Plan
Tax-advantaged 401(k) savings opportunity with company matching contributions
Company retirement contributions
Access to Fidelity resources and financial planning consultants
Tuition assistance
Adoption assistance
Paid parental leave
Disability benefits
Life insurance
12 paid holidays
Permissive time off
Company
GE Vernova
GE Vernova provides energy consulting, gas power, and grid solutions.
Funding
Current Stage
Public CompanyTotal Funding
$7.68MKey Investors
U.S. Department of Energy Office of ElectricityARPA-E
2024-12-03Grant· $1.99M
2024-12-03Grant· $2.99M
2024-11-18Grant· $2.7M
Recent News
The Motley Fool
2026-01-22
Investor's Business Daily
2026-01-21
The Motley Fool
2026-01-21
Company data provided by crunchbase