Cybersecurity TPRM Strategy & Governance Principal SME
Core
Define and drive HPE's enterprise third-party cybersecurity risk strategy, governance, and operating framework, leading due diligence and supply chain cybersecurity initiatives.
Role type
Principal Strategy & Governance SME (Third-Party Risk Management)
Builds
Enterprise-wide cybersecurity due diligence frameworks, vendor oversight programs, and regulatory compliance operating models.
Domain
Cybersecurity, Third-Party Risk Management (TPRM), Supply Chain Security, Regulatory Compliance
Required skills
Third-Party Risk Management (TPRM), Supply Chain Cybersecurity, Cybersecurity Governance, Global Regulatory Frameworks (DORA, NIS2, CRA), Risk Assessment Methodologies, Executive Stakeholder Engagement, Strategic Program Leadership
Preferred skills
AI/Cloud Supply Chain Risk Analysis, Geopolitical Risk Assessment, Enterprise Transformation Leadership
Technologies
NIST CSF, NIST 800-53, NIST SSDF, ISO 27001, ISO 22301
Responsibilities
Lead third-party cybersecurity governance and regulatory due diligence; Design organization-wide due diligence frameworks and assessment methodologies; Partner with Procurement, Legal, Compliance, and IT to drive controls; Drive executive governance forums and strategic decision-making; Evaluate emerging risks in AI, cloud, and software supply chains; Provide thought leadership and mentoring to cross-functional teams.
Seniority
Principal, Strategy & Mentorship
