Cybersecurity TPRM Strategy & Governance Principal SME

Cybersecurity TPRM Strategy & Governance Principal SME    This role has been designed as ‘’Onsite’ with an expectation that you will primarily work from an HPE office. Who We Are: Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way people live and work. We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud, so they can turn insights into outcomes at the speed required to thrive in today’s complex world. Our culture thrives on finding new and better ways to accelerate what’s next. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good. If you are looking to stretch and grow your career our culture will embrace you. Open up opportunities with HPE. Job Description: About the Role  The Cybersecurity TPRM Strategy & Governance Principal SME defines and drives HPE's enterprise third-party cybersecurity risk strategy, governance, and operating framework. The role leads cybersecurity due diligence, supply chain cybersecurity, and operational resilience initiatives while ensuring compliance with evolving regulatory requirements including DORA, NIS2, EU Cyber Resilience Act (CRA), SEC Cybersecurity Rules, and emerging global regulations. About You  You will be responsible for providing thought leadership and strategic direction for the design, implementation, and continuous improvement of risk-based due diligence, vendor oversight, operational resilience, and supply chain cybersecurity programs. This role influences executive decision-making, leads TPRM transformation initiatives, and drives adoption of scalable governance, automation, and technology solutions that enhance cybersecurity risk management across the third-party lifecycle.   Responsibilities  • Serve as the lead for third-party cybersecurity governance, regulatory and cybersecurity due diligence, ensuring alignment with evolving global requirements, including DORA, NIS2, EU Cyber Resilience Act (CRA), GDPR, SEC Cybersecurity Rules, and emerging cybersecurity and operational resilience regulations.  • Provide senior-level expertise and leadership for complex risk decisions related to third parties.  • Design and drive organization-wide cybersecurity due diligence frameworks, assessment methodologies, standards, and requirements that support regulatory compliance, operational resilience, and effective third-party risk management.  • Lead the evolution of vendor criticality, inherent risk, residual risk, concentration risk, operational resilience, and continuous monitoring frameworks.  • Partner with Procurement, Legal, Compliance, Privacy, Internal Audit, Enterprise Risk Management, IT, Supply Chain, and business stakeholders to drive regulatory requirements and cybersecurity controls.  • Drive executive governance forums, regulatory readiness initiatives, and strategic decision-making related to third-party cybersecurity risk and resilience.  • Evaluate third party emerging risks related to artificial intelligence, cloud providers, software supply chains, critical infrastructure, geopolitical developments, and evolving threat landscapes.  • Drive enterprise-wide transformation initiatives that improve scalability, operational efficiency, user experience, and risk management effectiveness.  • Provide thought leadership, mentoring, to less experienced staff members and other cross functional leads.     Education and Experience Required   • Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, Engineering, or equivalent.  • Typically, 10-15+ years of experience in cybersecurity, risk management, governance, regulator