Cybersecurity TPRM Strategy Lead

Hewlett Packard Enterprise Company; Friday Harbor (WA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Hewlett Packard Enterprise is seeking a Cybersecurity TPRM Strategy and Governance SME to lead the enterprise third-party risk management program. The role is hybrid, requiring an average of 2 days per week from an HPE office, and focuses on defining strategy, operating model, and a governance framework for TPRM across the organization.

You will partner with Procurement, Legal, Compliance, Privacy, IT, and business stakeholders to align processes with regulatory requirements, establish KPIs, and

Qualifications

• Designing or managing TPRM programs, frameworks, and governance models.
• Knowledge of cyber and IT security risks, threats, and prevention measures.
• Experience with risk management frameworks like NIST CSF, NIST 800-53, ISO 27001.

Responsibilities

• Develop and maintain the enterprise Cybersecurity Third-Party Risk Management strategy and operating model.
• Define risk-based frameworks, standards, and procedures for managing third-party cybersecurity risk.
• Lead vendor criticality, inherent risk, residual risk, and due diligence frameworks.
• Identify opportunities to streamline and automate TPRM processes for scalability.
• Partner with Procurement, Legal, Compliance, Privacy, IT, and stakeholders to align processes with regulatory requirements.
• Establish metrics, KPIs, and reporting to measure program effectiveness and risk exposure.
• Provide thought leadership on emerging risks including supply chain security and AI-related risks.
• Lead assessments of TPRM tools and drive automation and workflow improvements.
• Develop executive-level reporting to communicate maturity and strategic initiatives.
• Support enterprise-wide regulatory compliance and governance initiatives.

Skills

TPRM strategy

Governance

Executive communication

Stakeholder management

NIST CSF knowledge

ISO 27001 knowledge

Cybersecurity risk management

GRC platforms

Education

Bachelor's or Master's degree in Engineering, Computer Science, Information Security or equivalent

Tools

OneTrust

Archer

ServiceNow

Job description

Hewlett Packard Enterprise is seeking a Cybersecurity TPRM Strategy and Governance SME to lead the enterprise third-party risk management program. The role is hybrid, requiring an average of 2 days per week from an HPE office, and focuses on defining strategy, operating model, and a governance framework for TPRM across the organization.

You will partner with Procurement, Legal, Compliance, Privacy, IT, and business stakeholders to align processes with regulatory requirements, establish KPIs, and