Senior Cyber TPRM Strategy & Governance Lead

Hewlett Packard Enterprise; Aguadilla (PR); On-site; USD 140,000 - 321,000; Full time

Job summary

Hewlett Packard Enterprise is seeking a Senior Cybersecurity TPRM Strategy & Governance Principal SME to define and drive our third-party risk program. You will shape governance, due diligence, and operating models across global regulatory requirements while advising executives on risk decisions.

You will lead enterprise-wide transformations, collaborate across Procurement, Legal, Compliance, Privacy, IT, and Enterprise Risk Management, and mentor staff while raising the maturity of our

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, Engineering, or equivalent.
• Typically, 10-15+ years of experience in cybersecurity, risk management, governance, regulatory compliance, or related disciplines.
• Significant experience in designing, leading, and transforming enterprise Third-Party Risk Management (TPRM), Supply Chain Cybersecurity, or Governance, Risk, and Compliance (GRC) programs.
• Demonstrated experience driving enterprise-wide cybersecurity strategy, governance, regulatory compliance, and transformation initiatives.
• Industry certifications such as CISSP, CISM, CRISC, or equivalent.

Responsibilities

• Lead third-party cybersecurity governance and due diligence across global requirements (DORA, NIS2, CRA, GDPR, SEC Rules).
• Provide senior-level guidance for complex risk decisions involving third parties.
• Design enterprise-wide due diligence frameworks, assessment methods, standards, and requirements.
• Lead evolution of vendor criticality, inherent/residual/concentration risk, and monitoring.
• Partner with Procurement, Legal, Compliance, Privacy, Internal Audit, ERM, IT, and Supply Chain.
• Drive executive governance forums, regulatory readiness initiatives, and strategic decisions.
• Evaluate emerging third-party risks related to AI, cloud providers, software supply chains, geopolitical trends.
• Lead enterprise-wide transformation programs to improve scalability, efficiency, and risk management.
• Provide mentoring to junior staff and cross-functional leads.

Skills

Executive presence

Stakeholder management

Strategic thinking

Leadership

Education

Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, Engineering, or equivalent

CISSP, CISM, CRISC or equivalent certifications

Tools

NIST CSF

NIST 800-53

ISO 27001

ISO 22301

Regulatory frameworks governance

Job description

Hewlett Packard Enterprise is seeking a Senior Cybersecurity TPRM Strategy & Governance Principal SME to define and drive our third-party risk program. You will shape governance, due diligence, and operating models across global regulatory requirements while advising executives on risk decisions.

You will lead enterprise-wide transformations, collaborate across Procurement, Legal, Compliance, Privacy, IT, and Enterprise Risk Management, and mentor staff while raising the maturity of our