Principal Cyber Risk & TPRM Strategy Leader

Hewlett Packard Enterprise; Spring (TX); Sur place; USD 140 000 - 321 000; Plein temps

Avantages offerts par ce poste

Health & wellbeing

Personal & professional development

Unconditional inclusion

Résumé du poste

Hewlett Packard Enterprise is seeking a Cybersecurity TPRM Strategy & Governance Principal SME to define and drive enterprise third-party cybersecurity risk strategy, governance, and operating framework.

You will lead due diligence, vendor oversight, and resilience programs aligning with evolving global regulations. A senior role influencing executives and guiding cross-functional teams.

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, Engineering, or equivalent.
• 10–15+ years of experience in cybersecurity, risk management, governance, regulatory compliance, or related disciplines.
• Significant experience designing, leading, and transforming enterprise Third-Party Risk Management (TPRM) or Governance, Risk, and Compliance (GRC) programs.
• Experience driving enterprise-wide cybersecurity strategy, governance, regulatory compliance, and transformation initiatives.
• Certifications such as CISSP, CISM, CRISC, or equivalent.

Responsabilités

• Lead third-party cybersecurity governance, regulatory and due diligence across global requirements (DORA, NIS2, CRA, GDPR, SEC Rules).
• Design and drive organization-wide due diligence frameworks, assessment methodologies, and standards.
• Evolve vendor criticality, inherent and residual risk, concentration risk, and monitoring frameworks.
• Collaborate with Procurement, Legal, Compliance, Privacy, Internal Audit, IT, and Supply Chain to implement controls.
• Drive executive governance forums and regulatory readiness for third-party risk and resilience.

Connaissances

TPRM knowledge

C-SCRM

NIST CSF

Regulatory compliance

Executive communication

Stakeholder management

Formation

CS/InfoSec degree

Description du poste

Hewlett Packard Enterprise is seeking a Cybersecurity TPRM Strategy & Governance Principal SME to define and drive enterprise third-party cybersecurity risk strategy, governance, and operating framework.

You will lead due diligence, vendor oversight, and resilience programs aligning with evolving global regulations. A senior role influencing executives and guiding cross-functional teams.