CoreHRx Jobs

Apply in one click, save jobs and take free mock tests.

Register free Log in
Hiring? Post jobs with CoreHRx
My account
user

View & update profile

Product Security Lifecycle leader

LP1144 GE VERNOVA HYDRO POWER INDIA PRIVATE LIMITED

Full time
Location
Chennai
Work mode
Not stated
Salary
₹10L – ₹25L a year estimatetypical for IT Jobs in India, 826 posts
Posted 1 day ago Last checked 57 min ago

Free · takes a minute · your resume fills your profile

CoreHRx never asks candidates for money. If anyone does, .

Role at a glance

You will
  • The Product Lifecycle Leader is a specialized operational leadership position responsible for the technical execution of the Secure…
  • Reporting to the Senior Cybersecurity Leader, you will drive the practical implementation of security requirements and ensure all NPI and…
  • You will exercise high levels of operational judgment to manage a team of technical specialists, deploy advanced security tooling, and lead…
Must-have skills
Operational RiskSDLCSecurity QA & TestingVulnerability Management

How well do your skills match this job?

Sign in to see your fit: the skills, experience and location this job asks for, checked against your profile.

Job description

Location: Chennai; Rugby, India

# ******Job Description Summary******

# **Job Description**

**About the role**
The Product Lifecycle Leader is a specialized operational leadership position responsible for the technical execution of the Secure Development Lifecycle (SDLC) and Product Security Incident Response Team (PSIRT) operations across GE Vernova Power Conversion Solutions (PCS).

Reporting to the Senior Cybersecurity Leader, you will drive the practical implementation of security requirements and ensure all NPI and OTR programs meet rigorous technical standards throughout their lifecycle. You will exercise high levels of operational judgment to manage a team of technical specialists, deploy advanced security tooling, and lead the technical response to vulnerabilities to protect our products and global supply chain.

**Key Responsibilities
****SDLC Implementation & Governance**

  • **Operational SDLC:** Drive the practical application and technical execution of security processes across all PCS NPI programs, ensuring development teams meet secure development requirements.
  • **Tooling & Automation:** Deploy and maintain the necessary tools (SAST/DAST, automated gates) and technical training required for engineering teams to integrate security into their daily workflows.
  • **Supplier Security Operations:** Execute the service supplier security maturity program (aligned to IEC 62443 2-4), managing the technical assessments and training for third-party partners.
  • **OTR Technical Support:** Lead the technical integration of regional OTR teams into the standardized SDLC for application-level development.

**PSIRT Operations & Vulnerability Management**

  • **Team Leadership:** Direct the daily operations, performance, and technical output of PSIRT Analysts and security specialists, acting as the senior escalation point for complex technical challenges.
  • **Vulnerability Management:** Lead the technical intake, triage, and prioritization of vulnerabilities, providing the defensible rationale for risk thresholds and remediation paths.
  • **Technical Risk Execution:** Direct the execution of threat modeling, penetration testing, and formal risk assessments for product releases, solving technical problems that fall outside standard parameters.
  • **Incident Liaison:** Partner with Architecture and Engineering to ensure PSIRT findings and technical vulnerabilities are directly integrated into future design improvements.

**Innovation & Performance Tracking**

  • **Next-gen Tech:** Champion the adoption of frontier AI-based code analysis to accelerate proactive vulnerability management and improve CI/CD security analysis.
  • **Operational Metrics:** Track and report performance-level metrics, such as Mean Time to Detect (MTTD) and Mean Time to Remediate (MTTR), to measure the speed and effectiveness of the PSIRT function.
  • **Advisory Management:** Execute the security advisory and CVE monitoring process in collaboration with Senior Cybersecurity Leader and GEV CIRT team

**Supply Chain and SBOM**

  • **SBOM Operations:** Maintain SCA tooling and operationalize SBOM standards, ensuring 100% visibility into the source and binary components of product and system.
  • **Technical Response:** Ensure all supply chain components are defined in GE Vernova’s vulnerability management tool allowing for rapid impact analysis when upstream vulnerabilities are detected.

**Qualifications & Skills**

**Required**

  • **Experience:** Significant experience in technical Cybersecurity Leadership, specifically SDLC implementation and PSIRT management.
  • **Leadership:** Proven track record managing a team of technical specialists and driving adoption of new security technology/ tools.
  • **Technical Expertise:** Deep knowledge of secure development lifecycle and vulnerability management, incident response and automated security testing
  • **Certifications:** CISM, CISSP, CSSLP, GICSP or equivalent.
  • **Communication:** Ability to simplify technical operational risk and remediation plans for senior leadership and stakeholders.

**Desired**

  • **Education:** Degree in Engineering, Computer Science or Cybersecurity.
  • **Standards Knowledge:** Experience applying standards such as IEC 62443, NIST SP 800 and the EU Cyber Resilience Act in a practical, industrial development environment.

**What you can expect from us:**

**Additional Information:**

Compensation Grade: SPB2
Relocation Assistance Provided: No

# ******Additional Information******

**Relocation Assistance Provided:** Yes

Addressing the climate crisis is an urgent global priority and we take our responsibility seriously. That is our singular mission at GE Vernova: continuing to electrify the world while simultaneously working to help decarbonize it.

If we want our energy future to be different…we must be different.

Our mission is embedded in our name. We retain our treasured legacy, “GE,” in our name as an enduring and hard-earned badge of quality and ingenuity. “Ver” / “verde” signal Earth’s verdant and lush ecosystems. “Nova,” from the Latin “novus,” nods to a new, innovative era of lower carbon energy that GE Vernova will help deliver.

Together, we have The Energy to Change the World. [www.gevernova.com](http://www.gevernova.com/)

Job data: Headcount Labs (headcountlabs.com), ODbL 1.0. The job description belongs to the employer. Location data © OpenStreetMap contributors and Overture Maps.

Key skills

Required

Operational RiskSDLCSecurity QA & TestingVulnerability Management

Soft skills

CommunicationLeadership

Tags

Job market insights

64active Operational Risk jobs in India
29active SDLC jobs in Chennai
186active Security QA & Testing jobs in India
₹10L – ₹25L advertised yearly salary for IT Jobs in India (middle half of 826 posts that show a salary; median ₹17L)

Most IT Jobs posts in Chennai ask for 3–6 years of experience (44% of 699 that say).

Hiring most for IT Jobs in Chennai

  • Cognizant30 open jobs
  • Kyndryl28 open jobs
  • COGNIZANT TECH SOLUTIONS A22 open jobs

Jobs asking for Operational Risk in India also ask for

  • Stakeholder Management31%
  • Risk Management28%
  • Investment Banking25%
  • MS Office23%
  • Process Improvement20%

From live job posts on CoreHRx, updated 13 Nov 2026. Skill figures count posts that list their skills; salary figures only posts that show a salary.

Questions about this job

What is the salary for this Product Security Lifecycle leader job?

The post does not state the pay. As an estimate, comparable posts on CoreHRx advertise ₹10L – ₹25L a year (typical for IT Jobs in India, 826 posts).

Where is this job based?

In Chennai.

What kind of job is this?

It is a full time job.

Preparing for an IT or software developer interview in India? This guide covers the rounds companies run, the technical and HR interview questions asked most often for freshers and experienced developers, sample answers you can adapt, and a simple preparation plan.

Questions you may be asked

  1. Tell me about yourself.
  2. Explain the four pillars of object-oriented programming.
  3. What is the difference between a process and a thread?
  4. How do you find the second highest salary in SQL?

Get IT jobs in Chennai by email

Create a free profile and we email you new IT jobs in Chennai, at most once a week.

Similar jobs

Telecaller

Eduflourish
Bangalore East
Admissions CounsellingBusiness DevelopmentCommunicationTelesales
Full time On-site 3 days ago

Free · takes a minute · your resume fills your profile