Job Description Summary
The Senior Risk Advisor role will be responsible for determining and executing GE Aerospace's cyber regulatory and compliance strategy with a focus on regional support. This role will drive meaningful and coordinated engagement with the Works Councils, Security, Compliance and Governance, Technology, Legal and HR partners and labor employee representatives.
This role will need to understand the needs of the GE Aerospace business and partner with various leadership and project teams to support a holistic risk-based approach to delivering in a secure and compliant manner. This role will act as a liaison between Cyber Security, the business and DT team members with key Cyber Security initiatives while helping provide advice, strategy, and guidance with respect to all cybersecurity and data protection matters as affected by laws, regulations, policy changes, and industry trends.
Job Description
Roles and Responsibilities
In this role, you will:
Partner with GE Aerospace Enterprise Cybersecurity, manage the strategic roadmap for cybersecurity initiatives and measure program effectiveness for the business, with a focus on managing cybersecurity and compliance risk as it relates to the product portfolio and businessProactively build and foster individual relationships with Legal, Data Privacy Officers and Works Council membersDemonstrate strong relationship management skillsBe responsible for identifying and communicating regional cyber and compliance risk and collaborate on creating and implementing risk response plans.Drive consistency and process design across all business units in region Collaborate with others to create standard work and share best practicesDevelop business domain expertise to inform the cybersecurity and compliance risk management strategyAdvocate for the DT team to ensure proper strategy and communications accompany cyber initiativesProvide regular program updates and risk briefings to various leadership, project teams and cross-functional stakeholdersServe as a cybersecurity and technology risk subject matter expert for the business and regionSupport the implementation of new technology and systems in line/partnership with the privacy-by-design approach, using your expertise to drive information & consultation with Works Councils at European and country level to successful conclusion.Be involved in system modification and change related processes to support the teams to identify what changes would potentially trigger the need for Works Council notification, consultation and/or co-determination processesPrepare the information to run successful Works Council (DT) negotiations/consultations - including but not limited to description of hardware, software, system architecture and interfaces, and details on functionality. Translating DT functionality/terminology to non-DT professionals is critical.Aid in the vetting, implementation, and enforcement of GE Aerospace policies & standardsCreatively problem solve Handle highly confidential and sensitive information with complete discretion
Qualifications/Requirements
Bachelor's Degree in Computer Science or "STEM" Majors (Science, Technology, Engineering and Math) with significant experience.Excellent English and German written and verbal communication skillsWillingness to travel up to 30% of the time (mostly in EU region) as needed
Desired Characteristics
Ability to quickly build credibility, influence and make recommendations to all levels.Strong functional team player with experience working seamlessly across a heavily matrixed structure.Understanding of international privacy and legal regulationsProven proactive problem-solving abilitiesExperience working with software development teamsAbility to learn complex systems and business processes and define requirements for solutions Excellent interpersonal, presentation and facilitation skillsFamiliar with enterprise infrastructure designs and concepts including Authentication, Logging, Interconnectivity, Internet and application proxy, cloud computing, hosting, application code security, Virtual computing, Database administration, Data storage, Data backup, Encryption, Middleware, Firewall policy, Network segmentation, Mainframe etc.CISSP/CISM/CISA certificationPrior experience doing Lean Process improvement work
#LJ-MJ1
Additional Information
Relocation Assistance Provided: No
#LI-Remote - This is a remote position