Cybersecurity TPRM Strategy and Governance SME

Cybersecurity TPRM Strategy and Governance SME

This role has been designed as 'Hybrid' with a requirement that you will work on average 2 days per week from an HPE office.

Who We Are:

Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way people live and work.

We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud, so they can turn insights into outcomes at the speed required to thrive in today's complex world.

Our culture thrives on finding new and better ways to accelerate what's next.

We know varied backgrounds are valued and succeed here.

We have the flexibility to manage our work and personal needs.

We make bold moves, together, and are a force for good.

If you are looking to stretch and grow your career our culture will embrace you.

Open up opportunities with HPE.

Job Description:

Job Descritption

The Cybersecurity TPRM Strategy & Governance SME is responsible for defining and advancing the organization's third-party cybersecurity risk management strategy, operating model, and governance framework.

This role drives program maturity, efficiency, and scalability by establishing risk-based processes, standards, methodologies, and technology-enabled solutions that support effective management of cybersecurity risks throughout the third-party lifecycle.

Responsibilities:


* Develop and maintain the enterprise CybersecurityThird-Party Risk Management (TPRM) strategy, and operating model.


* Define and continuously improve third party risk-based frameworks, methodologies, standards, and procedures for managing third-party cybersecurity risk.


* Lead the evolution of vendor criticality, inherent risk, residual risk, and due diligence frameworks.


* Identify opportunities to streamline, automate, and optimize TPRM processes to improve scalability, efficiency, and user experience.


* Partner with Procurement, Legal, Compliance, Privacy, Supply Chain, IT, and business stakeholders to align TPRM processes with business objectives and regulatory requirements.


* Establish metrics, KPIs, and reporting frameworks to measure program effectiveness, risk exposure, and operational performance.


* Provide thought leadership on emerging risks, including supply chain security, software supply chain risk, cloud providers, AI-related risks, and operational resilience.


* Lead assessments of TPRM tools and technology solutions and drive automation and workflow improvements.


* Develop executive-level reporting and presentations to communicate program maturity, risks, and strategic initiatives.


* Support enterprise-wide initiatives related to regulatory compliance, cybersecurity governance, and operational resilience.



* Provides guidance and mentoring to less- experienced staff members.

Education and Experience Required:


* Bachelor's or Master's degree in Engineering, Computer Science, Information Security or eq...