Cybersecurity Risk and Controls Framework Expert, Hewlett Packard Enterprise

Hewlett Packard Enterprise

Location:
United States, Spring

Category:
IT - Administration

Contract Type:
Employment contract

Salary:

105500.00 - 243000.00 USD / Year

Save Job

Apply Position

Job Description:

We are seeking a Cybersecurity Risk and Controls Framework Expert to analyze regulatory compliance, business and operational risk requirements related to cybersecurity and develop a framework against which control requirements can be defined and applied

Job Responsibility:

Support Governance, Risk and Compliance leadership in delivering various risk overview summaries
Contribute to the development of the Cyber risk governance framework by leveraging existing frameworks
Facilitate a gap analysis of current processes against the Risk management framework
Provide subject matter expertise on the control framework, policies, standards and guidelines
Analyze current controls against the control framework
Ensure effective communication of changes to risk governance frameworks
Work with regional representatives to coordinate regulatory scanning
Provide expert opinion on HPE’s risk and effectiveness of policies
Handle questions on cyber policies and standards
Deliver presentations and updates to key stakeholders
Provide insights to business and technology partners on risks

Requirements:

Expert in a broad range of Information Security domains (e.g., Application Security, Cloud Security, Network Security, Data Security, Infrastructure Security)
Strong understanding of cybersecurity control frameworks (e.g., NIST CSF, ISO 27001)
Proven experience in risk assessments and analysis
Proven experience in defining and implementing cybersecurity policies, standards and guidelines across multiple platforms
Strong organizational skills and attention to detail
Ability to work effectively with technical and non-technical stakeholders
Excellent documentation, communication, and problem-solving skills

Nice to have:

Experience working with various industry standards and frameworks on risks and controls
CISSP, CRISC, or similar certifications
5-7 years of experience in Information Security, IT Governance, and/or Risk Management

What we offer:

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Additional Information:

Job Posted:
November 11, 2025

Employment Type:

Fulltime

Work Type:

Hybrid work

View All Jobs In This Company

Job Link Share:

Cybersecurity Risk and Controls Framework Expert