• Serve as the authoritative owner of enterprise-wide security architecture, reference architectures, and standards and ensuring they remain current with evolving threats, and emerging technologies as well as ensuring they are embedded into process across engineering and product teams • Provides authoritative security guidance across multiple operating companies and domains, influencing senior leaders to align security strategy with business objectives and adopt consistent standards • Serve as a subject matter authority across a broad portfolio of cybersecurity domains, providing expert guidance on identity and access management, monitoring and detection, cloud security architecture, endpoint security, data protection, and network security • Lead complex security architecture reviews, evaluating proposed designs, systems, and technologies to identify risk exposures and provide actionable, risk-mitigating recommendations to engineering and product teams • Establish and maintain security architecture principles, patterns, and standards aligned to frameworks such as NIST CSF, ISO 27001, and Zero Trust Architecture • Evaluate and advise on the selection of security technologies and tools, assessing fit against organizational needs, risk posture, and strategic direction • Communicate complex cybersecurity risks, findings, and recommendations clearly and concisely to directors and executives, translating technical concepts into business impact and strategic context • Build and sustain trusted relationships across operating companies, technology teams, and leadership to drive security priorities and foster a security-conscious culture • Influence security decisions and adoption of security standards across the organization without direct authority, leveraging expertise, data, and persuasive communication • Own and drive complex, cross operating company security projects and initiatives from initiation through delivery with minimal supervision, proactively identifying risks, managing stakeholder expectations, and removing obstacles • Conduct and lead architectural based security risk assessments of new and existing technologies, third-party integrations, and business processes, producing clear risk findings with prioritized mitigation options • Act as a mentor and technical resource for junior and mid-level security analysts and engineers, sharing expertise and elevating the overall capability of the security organization.

• Provide strategic leadership for the GE Aerospace Cybersecurity Response Team (GCRT) • Lead a global team of cybersecurity SOC analysts and incident responders to triage alerts and notables, detect and analyze potential cybersecurity threats, and contain and remediate cybersecurity incidents • Manage the strategy for working with Managed Detection and Response (MDR) partners • Define and execute the global SOC and incident response strategy, aligned to enterprise risk, regulatory requirements, and business priorities to identify and mitigate cybersecurity threats • Lead 24x7 SOC operations across regions, ensuring consistent detection, triage, containment, and recovery processes with clear escalation paths • Design and develop incident response capabilities to increase effectiveness, integrating across architecture, detection engineering, SIEM, SOAR, endpoint, network, cloud, identity, email, OTN, and other platforms • Lead major incident response efforts with some nontraditional working hours including technical actions to contain and remediate cybersecurity incidents and complete forensic investigations • Operate a hybrid SOC model with clear roles and responsibilities while managing performance oversight and accountability of strategic MDR partners and incident response service providers • Benchmark program capabilities against industry standards and peer organizations and ensure compliance with relevant regulations and standards for data protection and cybersecurity • Stay informed with the latest trends and technologies in cybersecurity to continuously enhance the organization's defenses • Recruit, develop, and retain global talent, offering feedback and growth opportunities; establish on-call rotations, training, certifications, and career paths to strengthen team capability • Manage team deliverables, setting goals and priorities throughout the year, and manage budgets related to scope of team • Communicate effectively both within immediate team and GE leadership, ensuring consistent messages and a clear understanding of business direction, strategy and results.

• Implement and manage the NIST Risk Management Framework (RMF) to achieve and maintain compliance, mapping controls from standards like SOC 2, PCI, NIST 800-53, NIST 800-171, and CMMC. • Drive the data privacy program by conducting Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) and managing day-to-day operations like Data Subject Access Requests (DSARs). • Design and execute a continuous internal audit program to validate the effectiveness of controls across both quantum R&D and classical infrastructure, leveraging automated evidence collection to ensure year-round audit readiness. • Develop and enforce a comprehensive Data Governance framework that defines data ownership, classification, and lifecycle management specifically for sensitive quantum research data and proprietary algorithms. • Assess and mitigate risks unique to a quantum computing R&D environment, including intellectual property protection, supply chain security for specialized hardware, and physical security of lab environments. • Establish and mature the organization’s AI Governance Framework in alignment with the NIST AI RMF, performing risk assessments and security reviews of new AI tools and platforms. • Ensure our cloud environments (e.g., AWS, GCP, Azure) are configured and audited against security benchmarks, driving the creation and management of a formal risk remediation roadmap. • Spearhead the automation of GRC processes, building end-to-end compliance workflows in platforms like Jira to reduce manual effort in evidence collection and remediation tracking. • Develop and maintain security metrics and dashboards to report on compliance posture, risk levels, and program maturity to leadership. • Collaborate with technical and non-technical teams from legal to engineering, including on matters of technology, and prepare teams through training and exercises.

• Lead investigations into business performance across growth motions such as expansions, up-tiers, and new logo activity to identify high-impact opportunities and set priorities for the security portfolio. • Partner with Customer Success, Solutions Architecture, Account Executives, customers, data analytics, and finance to understand business patterns and turn insights into action. • Drive product management work that improves product-market fit and supports stronger go-to-market execution for GitLab security offerings, with a focus on improving adoption, retention, and growth performance. • Recommend solutions across multiple levers, including product changes, pricing and packaging, promotions, and marketing or positioning inputs. • Establish strategy and alignment across product managers on related problems to reduce silos, prevent duplicate efforts, and build momentum toward more cohesive solutions that strengthen business impact. • Guide discovery on shared customer problems across scanners and adjacent security capabilities in the platform. • Lead prioritization discussions with Research and Development and other product leaders to shape the roadmap around high-value opportunities that balance customer needs with business outcomes. • Communicate findings, trade-offs, and recommendations clearly to stakeholders across product, technical, and go-to-market teams. • Mentor other product managers in GTM problem-solving, market insight, and cross-functional execution to build stronger product leadership across the security organization.