Cybersecurity TPRM Strategy and Governance SME

About the role

The Cybersecurity TPRM Strategy & Governance SME will define and advance HPE’s third‑party cybersecurity risk management strategy, operating model, and governance framework. This hybrid role works on‑site two days a week and partners with multiple business functions to embed risk‑based processes across the vendor lifecycle.

Key responsibilities

• Develop and maintain the enterprise Cybersecurity Third‑Party Risk Management (TPRM) strategy and operating model.
• Define and continuously improve risk‑based frameworks, methodologies, standards, and procedures for managing third‑party cybersecurity risk.
• Lead evolution of vendor criticality, inherent risk, residual risk, and due‑diligence frameworks.
• Identify and implement automation opportunities to improve scalability, efficiency, and user experience.
• Partner with Procurement, Legal, Compliance, Privacy, Supply Chain, IT, and business stakeholders to align TPRM processes with objectives and regulations.
• Establish metrics, KPIs, and reporting to measure program effectiveness and risk exposure.
• Provide thought leadership on emerging risks such as supply‑chain security, software‑supply chain, cloud, AI, and operational resilience.
• Assess TPRM tools, drive automation, and develop executive‑level reporting.

Required profile

• Bachelor’s or Master’s degree in Engineering, Computer Science, Information Security or equivalent.
• 6‑10 years of experience designing or managing TPRM programs, frameworks, and governance models.
• Strong knowledge of cybersecurity and risk‑management frameworks (NIST CSF, NIST 800‑53, ISO 27001).
• Experience translating regulatory and security requirements into scalable policies and processes.
• Proven ability to lead strategic initiatives, process transformation, and organizational change.

Required skills

• OneTrust
• Archer
• ServiceNow
• NIST CSF
• NIST 800‑53
• ISO 27001

What we offer

• Health & Wellbeing benefits supporting physical, financial and emotional health.
• Personal & Professional Development programs to advance career goals.
• Unconditional Inclusion fostering a flexible, diverse and supportive workplace.