Senior Director - IT & OT Security

At GE Appliances, a Haier company, we come together to make “good things, for life.”  As the fastest-growing appliance company in the U.S., we’re powered by creators, thinkers and makers who believe that anything is possible and that there’s always a better way.  We believe in the power of our people and in giving them the freedom to explore, discover and build good things, together.  

The GE Appliances philosophy, backed by three simple commitments defines the way we work, invent, create, do business, and serve our communities:
* we come together*,
* we always look for a better way*, and
* we create possibilities*.The Senior Director – IT & OT Security is a critical & strategic role as GE Appliances embarks on becoming the #1 Home Ecosystem Company in the US. This leader is responsible for designing and executing the organization’s global cybersecurity vision across Information Technology (IT) and Operational Technology (OT). This role ensures the resilience of both digital enterprise systems and mission-critical industrial operations.

The leader will shape long-term security strategy, balance business growth with risk reduction, and protect the organization’s assets, data, and infrastructure against evolving cyber threats. Through leadership and direction to a global organization, this role focuses on safeguarding the company assets, data and infrastructure. By deploying and maintaining digital systems. This role needs a high level of technical leadership to drive the business security and continuity.

The Senior Director will work closely with all key Digital Technology and Business stakeholders to identify and maximize opportunities to deploy and improve systems and processes to safeguard GE Appliances.## ## Position Senior Director - IT & OT Security## ## Location

USA, Louisville, KY## How You'll Create Possibilities
* Define and drive the enterprise-wide cybersecurity vision and multi-year roadmap, with strong focus on IT/OT/industrial control systems (ICS).
* Align security strategy with corporate objectives, digital transformation, IT/OT convergence, and compliance obligations.
* Provide executive-level advisory to the CDO on cyber risks, emerging threats, and investment priorities.
* Provide regular updates to the CDO & Executive Leadership Team on cybersecurity posture, risks, and required investments.
* Lead enterprise-wide risk assessments and influence business decisions through risk-to-value tradeoff frameworks.
* Drive innovation by adopting new technologies (Zero Trust, AI/ML for threat detection, advanced OT monitoring).
* Integrate cybersecurity into the enterprise risk management framework, ensuring security risks are identified, assessed, and mitigated alongside financial, operational, and compliance risks.
* Partner with Legal, Audit, and Compliance to oversee regulatory adherence
* Foster strong external relationships with industry groups, government agencies, and regulators to shape cyber policy and best practices.
* Oversee enterprise-wide IT security across networks, applications, cloud, and endpoints.
* Ensure identity and access management, data protection, and monitoring are consistent with Zero Trust principles.
* Lead enterprise incident detection, response, and forensics across IT environments.
* Enhance robust IT incident response and disaster recovery protocols, ensuring minimal downtime in the event of cyberattacks.
* Ensure compliance with applicable frameworks such as NIST CSF, ISO 27001, GDPR, HIPAA, and CMMC.
* Build and lead a robust OT cybersecurity program securing industrial control systems (ICS), SCADA, PLCs, DCS, and plant-floor networks.
* Implement segmentation and defense-in-depth strategies to separate OT and IT environments without disrupting operations.
* Develop security standards for plant operations, connected devices, IIoT, and smart manufacturing initiatives.
* Conduct threat modeling, vulnerability assessments, and penetration testing tailored to OT environments.
* Collaborate with Plant Managers, Engineers, and Operations leaders to ensure production continuity while mitigating risks.
* Drive compliance with IEC 62443, NERC CIP, and industry-specific OT…