Principal Cybersecurity Regulatory Advisor

GE VernovaGE Vernova·Remote(Flexible / Remote)
Cybersecurity

WFA Digital Insight

As the demand for cybersecurity specialists grew 25% in 2025, companies like GE Vernova are seeking experts to navigate complex regulatory landscapes. With 10+ years of experience in cybersecurity and regulatory compliance, candidates can leverage their skills to drive business growth. Before applying, consider the importance of staying updated on global regulations like the EU Cyber Resilience Act and NERC CIP, as well as the need for strong analytical and communication skills.

Job Description

About the Role

The Principal Cybersecurity Regulatory Advisor plays a critical role in guiding GE Vernova's commercial product cybersecurity regulatory efforts. As the organization's primary subject matter expert, this individual will provide analysis and advisory support to empower business units to make informed, confident compliance decisions. The role operates within the Commercial & Regulatory Services function and directly influences the regulatory readiness of GE Vernova's Power, Wind, and Electrification product portfolios.

Day-to-day responsibilities include translating complex global regulations into actionable, business-contextualized guidance. This involves collaborating with cross-functional teams, including product design, manufacturing, and support services, to ensure compliance with relevant regulations. The ideal candidate will have a deep understanding of regulations such as the EU Cyber Resilience Act, NERC CIP, and SOCI, as well as experience with OT/ICS, SCADA, or industrial energy management systems.

What You Will Do

  • Act as the primary expert on cybersecurity regulations, including the EU Cyber Resilience Act (EU CRA), NERC CIP, SOCI, and others
  • Translate regulatory obligations into practical requirements for commercial product design, manufacturing, and support services
  • Lead regulatory gap analyses and provide remediation guidance for product teams and compliance stakeholders
  • Prepare advisory briefs for executive stakeholders regarding regulatory proposals, industry trends, and enforcement actions
  • Provide subject matter expertise for high-stakes customer-facing regulatory discussions
  • Maintain a centralized regulatory knowledge base and contribute to the development of AI-assisted regulatory analysis tools
  • Collaborate with cross-functional teams to ensure compliance with relevant regulations
  • Stay updated on emerging regulatory trends and advancements in cybersecurity

What We Are Looking For

  • 10+ years of experience in cybersecurity, with a focus on regulatory compliance, policy interpretation, or standards work within the industrial or energy sector
  • Domain expertise in at least two of the following: EU CRA, NERC CIP, NIS2, or IEC 62443
  • Analytical rigor and proven ability to interpret complex legal texts and translate them into actionable engineering and commercial guidance
  • Product domain expertise in OT/ICS, with 10+ years of experience with operational technology, ICS, SCADA, or industrial energy management systems
  • Exceptional communication skills, with the ability to produce authoritative documentation and executive-level briefings
  • Bachelor's degree in Cybersecurity, Engineering, Computer Science, Law, or a related discipline
  • Experience with EU product certification (CE marking, UL marking & other Notified Bodies) or conformity assessments
  • Professional certifications (e.g., GICSP, CISSP, CISM, ISA/IEC 62443)

Nice to Have

  • Active participation in industry regulatory bodies
  • Advanced degree (JD, LL.M., or Master's in Cybersecurity, Engineering, or Policy)
  • Experience with AI-assisted regulatory analysis tools
  • Familiarity with emerging regulatory trends and advancements in cybersecurity

Benefits and Perks

  • Competitive compensation package
  • Discretionary annual bonus
  • Medical, dental, vision, and prescription benefits
  • Remote work arrangement with flexible hours
  • Professional development opportunities
  • Access to cutting-edge technologies and tools
  • Collaborative and dynamic work environment
  • Recognition and reward for outstanding performance

How to Stand Out

  • Develop a strong understanding of global regulations, including the EU Cyber Resilience Act and NERC CIP, to increase your credibility as a candidate.
  • Highlight your experience with OT/ICS, SCADA, or industrial energy management systems to demonstrate your technical expertise.
  • Prepare examples of how you have translated complex regulatory obligations into practical requirements for commercial product design and manufacturing.
  • Showcase your ability to communicate complex technical information to non-technical stakeholders, including executive-level briefings and customer-facing discussions.
  • Be prepared to discuss your experience with regulatory gap analyses and remediation guidance, as well as your approach to maintaining a centralized regulatory knowledge base.
  • Consider obtaining professional certifications, such as GICSP, CISSP, or CISM, to demonstrate your commitment to the field and enhance your qualifications.

This is a remote position listed on WFA Digital, the platform for professionals who work from anywhere. Browse more remote jobs across all categories.