Senior Governance Analyst

Job Description Summary

What if you could spend your days not just maintaining security programs - but reimagining how they work? As a Staff Risk Analyst within GE Vernova's Power segment Digital Technology (DT) Governance & Compliance organization, you will take direct ownership of two enterprise-level security programs and have the mandate to make them smarter, leaner, and more impactful.

This is a role for someone who gets energized by both the rigor of operational excellence and the freedom to challenge how things are done - someone who sees automation not as a future ambition, but as something they are already building today.

Job Description

About the Role

You will own end-to-end execution of the Enterprise Vulnerability Management (EVM) and Disaster Recovery (DR) programs for the entire Power segment - while simultaneously driving process simplification, optimization, and automation, including the use of artificial intelligence (AI) agents and workflows.

• Lead cyber vulnerability management - Own identification, tracking, and resolution of vulnerabilities across all Power DT applications in line with EVM and NIS2 (Network and Information Security Directive) requirements; maintain the risk register, manage escalations, drive root cause analysis, and report regularly to leadership on status and trends.
• Drive governance and process improvement - Contribute to the Governance Optimization program by identifying inefficiencies, redesigning processes from first principles, and deploying AI-enabled workflows to reduce manual effort and increase program maturity.
• Support risk management and policy - Assist in risk assessments, document findings, and help maintain IT policies and procedures covering security, data management, and access control - keeping compliance repositories current and audit-ready.
• Build reporting and visibility - Develop and maintain dashboards and reports that give senior leadership a clear view of IT risk posture, compliance status, and control effectiveness; validate data integrity and support Key Performance Indicator (KPI) / Key Risk Indicator (KRI) reporting.
• Enable a culture of awareness - Help develop training materials and coordinate sessions that build understanding of compliance obligations and best practices across the organization; track participation and capture feedback.
• Support audit readiness - Organize documentation, respond to evidence requests, and support audit coordination activities to ensure the team is consistently prepared.

• Bachelor's degree in Computer Engineering, Computer Science, Information Systems, or a related field - or 1-3 years of equivalent practical experience in Cyber, IT Audit, or a related field
• 1-3 years of experience with foundational knowledge of security and application controls
• Hands-on curiosity with AI tools and workflow automation - you build, test, and iterate, and treat automation as core to how you work
• Strong analytical and problem-solving skills, including the ability to support control gap identification and basic root cause analysis
• Clear, confident written and verbal communication skills - equally effective with technical teams and senior leadership
• Demonstrated ability to collaborate across functions in a fast-paced, cross-functional environment
• Proficiency in data analysis, including Microsoft Excel; willingness to develop skills in reporting tools such as Power BI or Tableau

• Interest in or progress toward relevant certifications such as CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), or CRISC (Certified in Risk and Information Systems Control)
• Familiarity with COBIT (Control Objectives for Information and Related Technologies) frameworks or SOX (Sarbanes-Oxley Act) compliance requirements
• Experience with dashboard development and KPI/KRI reporting in a governance or risk context