Senior Governance Analyst

Job Description Summary

What if you could spend your days not just maintaining security programs, but reimagining how they work? As a Staff Risk Analyst within GE Vernova's Power segment Digital Technology (DT) Governance Compliance organization, you will take direct ownership of two enterprise-level security programs and have the mandate to make them smarter, leaner, and more impactful. This is a role for someone who gets energized by both the rigor of operational excellence and the freedom to challenge how things are done, someone who sees automation not as a future ambition, but as something they are already building today.

You will own end-to-end execution of the Enterprise Vulnerability Management (EVM) and Disaster Recovery (DR) programs for the entire Power segment, while simultaneously driving process simplification, optimization, and automation, including the use of artificial intelligence (AI) agents and workflows. Reporting directly to the Power DT Governance Compliance Leader, you will coordinate across application teams and senior Technology and Cyber leaders, translating operational data into clear, actionable insights for leadership.

Beyond EVM and DR, you will play a key role in Power DT s Governance Optimization program, a strategic initiative focused on reducing governance burden across the organization so the team can concentrate on what truly moves the needle.

• Lead cyber vulnerability management, Own identification, tracking, and resolution of vulnerabilities across all Power DT applications in line with EVM and NIS2 (Network and Information Security Directive) requirements; maintain the risk register, manage escalations, drive root cause analysis, and report regularly to leadership on status and trends.
• Drive governance and process improvement, Contribute to the Governance Optimization program by identifying inefficiencies, redesigning processes from first principles, and deploying AI-enabled workflows to reduce manual effort and increase program maturity.
• Support risk management and policy, Assist in risk assessments, document findings, and help maintain IT policies and procedures covering security, data management, and access control, keeping compliance repositories current and audit-ready.
• Build reporting and visibility, Develop and maintain dashboards and reports that give senior leadership a clear view of IT risk posture, compliance status, and control effectiveness; validate data integrity and support Key Performance Indicator (KPI) / Key Risk Indicator (KRI) reporting.
• Enable a culture of awareness, Help develop training materials and coordinate sessions that build understanding of compliance obligations and best practices across the organization; track participation and capture feedback.
• Support audit readiness, Organize documentation, respond to evidence requests, and support audit coordination activities to ensure the team is consistently prepared.

You are an analytical, intellectually curious problem-solver who brings both operational discipline and a genuine passion for innovation, especially at the intersection of AI, automation, and cybersecurity governance. Required Bachelor s degree in Computer Engineering, Computer Science, Information Systems, or a related field, or 1-3 years of equivalent practical experience in Cyber, IT Audit, or a related field 1-3 years of experience with foundational knowledge of security and application controls Hands‑on curiosity with AI tools and workflow automation, you build, test, and iterate, and treat automation as core to how you work Strong analytical and problem‑solving skills, including the ability to support control gap identification and basic…