Cybersecurity TPRM Strategy & Governance Leader

Hewlett Packard Enterprise Development LP; San Juan (PR); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Hewlett Packard Enterprise seeks a Cybersecurity TPRM Strategy and Governance SME to lead the third-party risk management program in a hybrid work setup from Puerto Rico. You will define risk-based policies, frameworks, and operating models to advance program maturity and scalability.

Collaborate with Procurement, Legal, Compliance, Privacy, IT, and business stakeholders to align with regulatory requirements and business goals.

Qualifications

• Demonstrated experience designing or managing TPRM programs and governance models.
• Strong knowledge of cyber and IT security risks and controls.
• Experience translating regulatory requirements into scalable policies and processes.
• Experience leading strategic initiatives and organizational change.
• Industry certifications such as CISSP/CISM/CRISC/CISA or equivalent.

Responsibilities

• Define and advance the TPRM strategy and operating model.
• Develop third-party risk frameworks, standards and procedures.
• Lead vendor criticality, inherent and residual risk assessments.
• Identify opportunities to streamline and automate TPRM processes.
• Collaborate with Procurement, Legal, Compliance, Privacy, IT and stakeholders.
• Establish KPIs and reporting for program effectiveness and risk.
• Provide executive-level reporting on risks and initiatives.
• Mentor less-experienced staff and guide governance activities.
• Support regulatory compliance and resilience initiatives.

Skills

TPRM strategy

Cybersecurity risk management

NIST CSF

ISO 27001

Regulatory compliance

Executive communication

Vendor risk

GRC platforms

Education

Bachelor's or Master's degree in Engineering, Computer Science, Information Security

Tools

OneTrust

Archer

ServiceNow

Job description

Hewlett Packard Enterprise seeks a Cybersecurity TPRM Strategy and Governance SME to lead the third-party risk management program in a hybrid work setup from Puerto Rico. You will define risk-based policies, frameworks, and operating models to advance program maturity and scalability.

Collaborate with Procurement, Legal, Compliance, Privacy, IT, and business stakeholders to align with regulatory requirements and business goals.