Cybersecurity Risk and Compliance Engineer

Overview

Cybersecurity Risk and Compliance Engineer focused on identifying, monitoring, and managing cybersecurity risks across the supply chain, including third-party/vendor assessments and compliance with standards and regulations.

What you'll do

• Proactively monitor Third Party Risk Management and supply chain cybersecurity issues and threats.
• Develop and perform cybersecurity audit activities and assessments for third parties.
• Evaluate risks and controls to set priorities and recommend mitigation strategies.
• Ensure compliance with company cybersecurity standards, policies, and government regulations.
• Create cybersecurity reports with findings and gaps and monitor actions until closure.
• Direct vendor design of software patches using security expertise and analysis.

What you'll need

• 4+ years of relevant experience.
• Bachelor’s degree required, preferably in computer science, engineering, or related field.
• Preferred certifications: CISA or CISSP (or other cybersecurity and risk-related certification).
• Advanced knowledge of Cyber and IT security risks, threats, and prevention measures.
• Understanding of SQL and relevant scripting languages.
• Advanced skills in security system analysis and security standards/best practices.
• Experience with Third Party Assessments (SaaS, IaaS, on premises, contractors, etc.).

Details

• Hybrid work with an average requirement of 2 days per week from an HPE office.
• Travel required.