Cybersecurity TPRM Strategy & Governance Principal SME

Hewlett Packard Enterprise; Aguadilla (PR); Sur place; USD 140 000 - 321 000; Plein temps

Résumé du poste

Hewlett Packard Enterprise is seeking a Senior Cybersecurity TPRM Strategy & Governance Principal SME to define and drive our third-party risk program. You will shape governance, due diligence, and operating models across global regulatory requirements while advising executives on risk decisions.

You will lead enterprise-wide transformations, collaborate across Procurement, Legal, Compliance, Privacy, IT, and Enterprise Risk Management, and mentor staff while raising the maturity of our

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, Engineering, or equivalent.
• Typically, 10-15+ years of experience in cybersecurity, risk management, governance, regulatory compliance, or related disciplines.
• Significant experience in designing, leading, and transforming enterprise Third-Party Risk Management (TPRM), Supply Chain Cybersecurity, or Governance, Risk, and Compliance (GRC) programs.
• Demonstrated experience driving enterprise-wide cybersecurity strategy, governance, regulatory compliance, and transformation initiatives.
• Industry certifications such as CISSP, CISM, CRISC, or equivalent.

Responsabilités

• Lead third-party cybersecurity governance and due diligence across global requirements (DORA, NIS2, CRA, GDPR, SEC Rules).
• Provide senior-level guidance for complex risk decisions involving third parties.
• Design enterprise-wide due diligence frameworks, assessment methods, standards, and requirements.
• Lead evolution of vendor criticality, inherent/residual/concentration risk, and monitoring.
• Partner with Procurement, Legal, Compliance, Privacy, Internal Audit, ERM, IT, and Supply Chain.
• Drive executive governance forums, regulatory readiness initiatives, and strategic decisions.
• Evaluate emerging third-party risks related to AI, cloud providers, software supply chains, geopolitical trends.
• Lead enterprise-wide transformation programs to improve scalability, efficiency, and risk management.
• Provide mentoring to junior staff and cross-functional leads.

Connaissances

Executive presence

Stakeholder management

Strategic thinking

Leadership

Formation

Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, Engineering, or equivalent

CISSP, CISM, CRISC or equivalent certifications

Outils

NIST CSF

NIST 800-53

ISO 27001

ISO 22301

Regulatory frameworks governance

Description du poste

This role has been designed as ‘’Onsite’ with an expectation that you will primarily work from an HPE office.

Who We Are

Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way people live and work. We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud, so they can turn insights into outcomes at the speed required to thrive in today’s complex world. Our culture thrives on finding new and better ways to accelerate what’s next. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good. If you are looking to stretch and grow your career our culture will embrace you. Open up opportunities with HPE.

Job Description

About the Role

The Cybersecurity TPRM Strategy & Governance Principal SME defines and drives HPE's enterprise third-party cybersecurity risk strategy, governance, and operating framework. The role leads cybersecurity due diligence, supply chain cybersecurity, and operational resilience initiatives while ensuring compliance with evolving regulatory requirements including DORA, NIS2, EU Cyber Resilience Act (CRA), SEC Cybersecurity Rules, and emerging global regulations.

About You

You will be responsible for providing thought leadership and strategic direction for the design, implementation, and continuous improvement of risk-based due diligence, vendor oversight, operational resilience, and supply chain cybersecurity programs. This role influences executive decision-making, leads TPRM transformation initiatives, and drives adoption of scalable governance, automation, and technology solutions that enhance cybersecurity risk management across the third-party lifecycle.

Responsibilities

• Serve as the lead for third-party cybersecurity governance, regulatory and cybersecurity due diligence, ensuring alignment with evolving global requirements, including DORA, NIS2, EU Cyber Resilience Act (CRA), GDPR, SEC Cybersecurity Rules, and emerging cybersecurity and operational resilience regulations.
• Provide senior-level expertise and leadership for complex risk decisions related to third parties.
• Design and drive organization-wide cybersecurity due diligence frameworks, assessment methodologies, standards, and requirements that support regulatory compliance, operational resilience, and effective third-party risk management.
• Lead the evolution of vendor criticality, inherent risk, residual risk, concentration risk, operational resilience, and continuous monitoring frameworks.
• Partner with Procurement, Legal, Compliance, Privacy, Internal Audit, Enterprise Risk Management, IT, Supply Chain, and business stakeholders to drive regulatory requirements and cybersecurity controls.
• Drive executive governance forums, regulatory readiness initiatives, and strategic decision-making related to third-party cybersecurity risk and resilience.
• Evaluate third party emerging risks related to artificial intelligence, cloud providers, software supply chains, critical infrastructure, geopolitical developments, and evolving threat landscapes.
• Drive enterprise-wide transformation initiatives that improve scalability, operational efficiency, user experience, and risk management effectiveness.
• Provide thought leadership, mentoring, to less experienced staff members and other cross functional leads.

Education And Experience Required

• Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, Engineering, or equivalent.
• Typically, 10-15+ years of experience in cybersecurity, risk management, governance, regulatory compliance, or related disciplines.
• Significant experience in designing, leading, and transforming enterprise Third-Party Risk Management (TPRM), Supply Chain Cybersecurity, or Governance, Risk, and Compliance (GRC) programs.
• Demonstrated experience driving enterprise-wide cybersecurity strategy, governance, regulatory compliance, and transformation initiatives.
• Industry certifications such as CISSP, CISM, CRISC, or equivalent.

Knowledge And Skills

• Expert knowledge of Third-Party Risk Management (TPRM), Supply Chain Cybersecurity, Cyber Supply Chain Risk Management (C-SCRM), and Cybersecurity Governance.
• Expertise in global cybersecurity regulations and regulatory frameworks, including DORA, NIS2, EU Cyber Resilience Act (CRA), and emerging cyber and operational resilience requirements.
• Advanced knowledge of cybersecurity and risk frameworks, including NIST CSF, NIST 800-53, NIST SSDF, ISO 27001, ISO 22301, and industry best practices.
• Demonstrated experience translating complex regulatory and cybersecurity requirements into enterprise policies, standards, governance frameworks, operating models, and scalable risk management processes.
• Proven ability to define and execute long-term cybersecurity strategy and influence organizational direction through executive engagement and thought leadership.
• Strong expertise in regulatory interpretation and impact to third parties.
• Strong executive presence with exceptional stakeholder management, communication, presentation, and influencing skills.
• Proven experience influencing executive leadership and leading complex cross-functional programs.
• Demonstrated success leading enterprise transformation programs and driving measurable business outcomes through governance, innovation, and strategic leadership.
• Excellent written and verbal communication skills; mastery in English.

Accessibility

HPE is committed to creating an inclusive and accessible workplace and encourages applications from all qualified individuals, including those with disabilities. If you believe you require accommodation during any stage of the application or interview process, please submit your request by completing our secure form linked here. Note: This option is reserved for applicants needing assistance/reasonable accommodation related to a disability.

What We Can Offer You

Health & Wellbeing

We strive to provide our team members and their loved ones with a comprehensive suite of benefits that supports their physical, financial and emotional wellbeing.

Personal & Professional Development

We also invest in your career because the better you are, the better we all are. We have specific programs catered to helping you reach any career goals you have — whether you want to become a knowledge expert in your field or apply your skills to another division.

Unconditional Inclusion

We are unconditionally inclusive in the way we work and celebrate individual uniqueness. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good.

Let's Stay Connected

Follow @HPECareers on Instagram to see the latest on people, culture and tech at HPE.

Job

Information Technology

Job Level

Master

Salary & Benefits

The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. – United States of America: Annual Salary USD 140,000 - 321,000 in Texas. The listed salary range reflects base salary. Variable incentives may also be offered.

Benefits Information

Information about employee benefits offered in the US can be found at https://myhperewards.com/main/new-hire-enrollment.html

Equal Employment Opportunity

HPE is an Equal Employment Opportunity/ Veterans/Disabled/LGBT employer. We do not discriminate on the basis of race, gender, or any other protected category, and all decisions we make are made on the basis of qualifications, merit, and business need. Our goal is to be one global team that is representative of our customers, in an inclusive environment where we can continue to innovate and grow together.

EEO Provisions

Hewlett Packard Enterprise is EEO Protected Veteran/ Individual with Disabilities.

Compliance Statement

HPE will comply with all applicable laws related to employer use of arrest and conviction records, including laws requiring employers to consider for employment qualified applicants with criminal histories.