Senior TPRM & Cybersecurity Strategy Lead

Hewlett Packard Enterprise; Spring (TX); On-site; USD 140,000 - 321,000; Full time

Job summary

Hewlett Packard Enterprise is seeking a Cybersecurity TPRM Strategy & Governance Principal SME to define and drive enterprise third-party cybersecurity risk strategy and operating framework. The role leads due diligence, supply chain cybersecurity, and resilience initiatives while aligning with evolving global regulations.

You will influence executive decisions, lead TPRM transformation, and promote scalable governance, automation, and technology solutions across the third-party lifecycle.

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, Engineering, or equivalent.
• Typically, 10-15+ years of experience in cybersecurity, risk management, governance, regulatory compliance, or related disciplines.
• Significant experience in designing, leading, and transforming enterprise Third-Party Risk Management (TPRM), Supply Chain Cybersecurity, or Governance, Risk, and Compliance (GRC) programs.
• Demonstrated experience driving enterprise-wide cybersecurity strategy, governance, regulatory compliance, and transformation initiatives.
• Industry certifications such as CISSP, CISM, CRISC, or equivalent.

Responsibilities

• Serve as lead for third-party cybersecurity governance, regulatory and cybersecurity due diligence, ensuring alignment with evolving global requirements (DORA, NIS2, GDPR, CRA, SEC Rules).
• Provide senior-level expertise and leadership for complex risk decisions related to third parties.
• Design and drive organization-wide cybersecurity due diligence frameworks and standards that support regulatory compliance and resilience.
• Lead evolution of vendor criticality, inherent risk, residual risk, concentration risk, and monitoring frameworks.
• Partner with Procurement, Legal, Compliance, Privacy, Internal Audit, ERM, IT, Supply Chain and stakeholders to drive regulatory requirements and cybersecurity controls.
• Drive executive governance forums, regulatory readiness initiatives, and strategic decision-making for third-party risk and resilience.
• Evaluate third-party emerging risks related to AI, cloud providers, software supply chains, and geopolitical developments.
• Drive enterprise-wide transformation initiatives to improve scalability and risk management.
• Provide thought leadership and mentorship to staff and cross-functional leads.

Skills

TPRM

Cybersecurity governance

Regulatory compliance

Supply chain cybersecurity

Executive stakeholder management

English proficiency

Education

Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, Engineering, or equivalent.

Job description

Hewlett Packard Enterprise is seeking a Cybersecurity TPRM Strategy & Governance Principal SME to define and drive enterprise third-party cybersecurity risk strategy and operating framework. The role leads due diligence, supply chain cybersecurity, and resilience initiatives while aligning with evolving global regulations.

You will influence executive decisions, lead TPRM transformation, and promote scalable governance, automation, and technology solutions across the third-party lifecycle.