HPE
Cybersecurity TPRM Strategy & Governance Principal SME
$140K–$321K
Spring, Texas, United States of America +1 · Principal · Full-time · Posted Oct 29, 2026
- Location
- Spring, Texas, United States of America
Aguadilla, Puerto Rico, Puerto Rico - Experience
- Typically 10-15+ years in cybersecurity, risk management, governance, regulatory compliance, or related disciplines.
- Education
- Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, Engineering, or equivalent.
About the job
Leads HPE’s enterprise third-party cybersecurity risk strategy, governance, due diligence, supply-chain security, and operational resilience programs.
What you'll do
- Set and improve cybersecurity due diligence frameworks, vendor oversight, risk assessment, and continuous monitoring.
- Lead regulatory readiness, executive governance, and cross-functional decisions on third-party cybersecurity risk.
- Drive TPRM transformation and evaluate emerging risks, including AI, cloud, and software supply chains.
What they ask for
- Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, Engineering, or equivalent.
- Significant experience designing, leading, and transforming enterprise TPRM, Supply Chain Cybersecurity, or GRC programs.
- Demonstrated experience driving enterprise cybersecurity strategy, governance, regulatory compliance, and transformation.
- Expert knowledge of TPRM, supply-chain cybersecurity, cybersecurity governance, and relevant regulations and frameworks.
Nice to have
- Industry certifications such as CISSP, CISM, CRISC, or equivalent.
Pay
USD 140,000 - 321,000 (base salary)
Tools
DORA, NIS2, EU Cyber Resilience Act (CRA), GDPR, NIST CSF, NIST 800-53, NIST SSDF, ISO 27001
AI focus
Evaluates third-party emerging risks related to artificial intelligence.
Model-written summary · the original posting is authoritative