Onsite Cybersecurity TPRM Strategy & Governance SME

Hewlett Packard Enterprise; Aguadilla (PR); On-site; USD 140,000 - 321,000; Full time

Job summary

Hewlett Packard Enterprise seeks a Cybersecurity TPRM Strategy & Governance Principal SME to define and drive enterprise third-party cybersecurity risk strategy, governance, and operating framework. You will lead due diligence, supply chain cybersecurity, and resilience initiatives while ensuring regulatory compliance across DORA, NIS2, CRA, SEC rules, and evolving global standards.

You will guide design and implementation of risk-based due diligence, vendor oversight, and scalable governance,

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, Engineering, or equivalent.
• Typically, 10-15+ years of experience in cybersecurity, risk management, governance, regulatory compliance, or related disciplines.
• Significant experience in designing, leading, and transforming enterprise Third-Party Risk Management (TPRM), Supply Chain Cybersecurity, or Governance, Risk, and Compliance (GRC) programs.
• Demonstrated experience driving enterprise-wide cybersecurity strategy, governance, regulatory compliance, and transformation initiatives.
• Industry certifications such as CISSP, CISM, CRISC, or equivalent.

Responsibilities

• Lead third-party cybersecurity governance, regulatory and due diligence ensuring alignment with global requirements.
• Provide senior-level expertise for complex risk decisions related to third parties.
• Design and drive organization-wide cybersecurity due diligence frameworks, assessment methodologies, standards, and requirements.
• Lead evolution of vendor criticality, inherent risk, residual risk, concentration risk, and monitoring frameworks.
• Partner with Procurement, Legal, Compliance, Privacy, Internal Audit, IT, Supply Chain and stakeholders to drive regulatory requirements and cybersecurity controls.
• Drive executive governance forums, regulatory readiness initiatives, and strategic decisions on third-party cybersecurity risk and resilience.
• Evaluate emerging third-party risks related to AI, cloud providers, software supply chains, and geopolitical developments.
• Drive enterprise-wide transformation initiatives to improve scalability, efficiency, user experience, and risk management.
• Provide thought leadership and mentoring to staff and cross-functional leads.

Skills

TPRM expertise

Governance frameworks

Regulatory compliance

Executive communication

Risk management

Stakeholder management

Education

Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, Engineering, or equivalent

Job description

Hewlett Packard Enterprise seeks a Cybersecurity TPRM Strategy & Governance Principal SME to define and drive enterprise third-party cybersecurity risk strategy, governance, and operating framework. You will lead due diligence, supply chain cybersecurity, and resilience initiatives while ensuring regulatory compliance across DORA, NIS2, CRA, SEC rules, and evolving global standards.

You will guide design and implementation of risk-based due diligence, vendor oversight, and scalable governance,