Cybersecurity TPRM Strategy and Governance Specialist

About the role

The Cybersecurity TPRM Strategy & Governance SME will define and advance HPE’s third‑party cybersecurity risk management strategy, operating model and governance framework. This hybrid role works on‑site two days a week and partners with multiple business functions.

Key responsibilities

• Develop and maintain the enterprise Cybersecurity Third‑Party Risk Management (TPRM) strategy and operating model.
• Define, improve and enforce risk‑based frameworks, standards and procedures for third‑party cybersecurity risk.
• Lead evolution of vendor criticality, inherent and residual risk, and due‑diligence frameworks.
• Identify and implement automation opportunities to scale TPRM processes.
• Partner with Procurement, Legal, Compliance, Privacy, Supply Chain, IT and business stakeholders to align TPRM with regulatory requirements.
• Establish metrics, KPIs and reporting to measure program effectiveness and risk exposure.

Required profile

• Bachelor’s or Master’s degree in Engineering, Computer Science, Information Security or equivalent.
• 6‑10 years of experience designing or managing TPRM programs and cybersecurity governance.
• Security certifications preferred (CISSP, CRISC, CISM, etc.).

Required skills

• Deep knowledge of NIST CSF, NIST 800‑53, ISO 27001 and related frameworks.
• Experience with TPRM/GRC platforms such as OneTrust, Archer or ServiceNow.
• Familiarity with global regulations: DORA, NIS2, GDPR, SEC Cybersecurity Rules.
• Strong analytical, stakeholder‑management and executive‑presentation abilities.