Senior Director - IT & OT Security

Overview

At GE Appliances, a Haier company, we come together to make “good things, for life.” As the fastest-growing appliance company in the U.S., we’re powered by creators, thinkers and makers who believe that anything is possible and that there’s always a better way. We believe in the power of our people and in giving them the freedom to explore, discover and build good things, together.

The GE Appliances philosophy, backed by three simple commitments defines the way we work, invent, create, do business, and serve our communities: we come together, we always look for a better way, and we create possibilities.

Interested in joining us on our journey?

Senior Director – IT & OT Security

Location:

USA, Louisville, KY

• Define and drive the enterprise-wide cybersecurity vision and multi-year roadmap, with strong focus on IT/OT/industrial control systems (ICS).
• Align security strategy with corporate objectives, digital transformation, IT/OT convergence, and compliance obligations.
• Provide executive-level advisory to the CDO on cyber risks, emerging threats, and investment priorities.
• Provide regular updates to the CDO & Executive Leadership Team on cybersecurity posture, risks, and required investments.
• Lead enterprise-wide risk assessments and influence business decisions through risk-to-value tradeoff frameworks.
• Drive innovation by adopting new technologies (Zero Trust, AI/ML for threat detection, advanced OT monitoring).
• Integrate cybersecurity into the enterprise risk management framework, ensuring security risks are identified, assessed, and mitigated alongside financial, operational, and compliance risks.
• Partner with Legal, Audit, and Compliance to oversee regulatory adherence
• Foster strong external relationships with industry groups, government agencies, and regulators to shape cyber policy and best practices.
• Oversee enterprise-wide IT security across networks, applications, cloud, and endpoints.
• Ensure identity and access management, data protection, and monitoring are consistent with Zero Trust principles.
• Lead enterprise incident detection, response, and forensics across IT environments.
• Enhance robust IT incident response and disaster recovery protocols, ensuring minimal downtime in the event of cyberattacks.
• Ensure compliance with applicable frameworks such as NIST CSF, ISO 27001, GDPR, HIPAA, and CMMC.
• Build and lead a robust OT cybersecurity program securing industrial control systems (ICS), SCADA, PLCs, DCS, and plant-floor networks.
• Implement segmentation and defense-in-depth strategies to separate OT and IT environments without disrupting operations.
• Develop security standards for plant operations, connected devices, IIoT, and smart manufacturing initiatives.
• Conduct threat modeling, vulnerability assessments, and penetration testing tailored to OT environments.
• Collaborate with Plant Managers, Engineers, and Operations leaders to ensure production continuity while mitigating risks.
• Drive compliance with IEC 62443, NERC CIP, and industry-specific OT security standards.
• Establish robust OT incident response and disaster recovery protocols, ensuring minimal downtime in the event of cyberattacks.
• Lead the MSSP to Establish and monitor service level agreements (SLAs) for security.
• As the executive leader you will be responsible for driving the consolidation of security systems for cost out/optimization
• Drive optimization of the cybersecurity budget, ensuring ROI on security investments and alignment with business priorities.
• Lead IT/OT security related policy development & deployment
• Drive enterprise-wide cybersecurity awareness and culture change programs.
• Define, measure, and report cybersecurity KPIs and KRIs, including incident response time, compliance maturity, OT system patching, downtime reduction, and vendor risk ratings.

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field.
• Minimum of twelve (12) or more years of prior relevant experience in roles of increasing responsibility with a minimum of five (5) years of experience leading a global cybersecurity
• Proven record in defining security strategies, managing…