Cybersecurity Compliance Specialist

Description -

Job Summary

We are seeking a highly skilledCybersecurity Compliance Specialistwith a strong background in third-party assurance ISO audits and other cybersecurity compliance activities. This role is ideal for an experienced professional with 7-10 years in cybersecurity and compliance looking to make an impact in a dynamic forward-thinking organization within HP.

As a Cybersecurity Compliance Specialist you will be responsible for ensuring that our organization and its third-party vendors meet the necessary cybersecurity standards regulations and industry best practices. You will play a key role in conducting ISO audits and managing compliance programs to protect sensitive data and maintain HPs cybersecurity posture.

Responsibilities

• Third-Party Assurance:
  • Support the third-party assurance program ensuring that for compliance-related questions and assessments (like periodic due diligence questionnaires) for existing HP clients are responded to timely.
  • Collaborate closely with other Cybersecurity and business teams to Support information security audits and assessments by second parties (customers entities).
  • Support general cybersecurity compliance and HP Security Posture inquiries

• ISO Audits & Certifications:
  • Oversee and manage ISO 27001 ISO 27002 and other relevant ISO audits in the organization.
  • Coordinate with internal teams to ensure timely and successful audit outcomes.
  • Develop and implement remediation plans for any gaps identified during audits and assessments.
• Compliance Activities:
  • Support the implementation of cybersecurity compliance frameworks (NIST CIS GDPR CCPA etc.) across the company.
  • Help develop and maintain a comprehensive compliance roadmap to ensure ongoing adherence to all relevant standards laws and regulations.
  • A requestto respond to questions related to Security standards and regulations like compliance withNIS2/DORA requirements.
  • Support for new or maintenance of cybersecurity certifications by third parties

Education & Experience Recommended
Four-year or Graduate Degree in Computer Science Information Technology or any other related discipline or commensurate work experience or demonstrated competence.
Typically has 7-10 years of work experience preferably in cyber & IT security or a related field.

Preferred Certifications

• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• ISO 27001 Lead Auditor/Implementer

Knowledge & Skills
Cybersecurity Compliance
Cybersecurity governance
Cybersecurity policies
Auditing
Risk management
Automation
Risk analysis
Issue tracking
Security controls
Operating systems

Cross-Org Skills
Effective Communication
Results Orientation
Learning Agility
Digital Fluency
Customer Centricity

Impact & Scope
Impacts multiple teams and may act as a team or project leader providing direction to team activities and facilitates information validation and team decision making process.

Complexity
Responds to moderately complex issues within established guidelines.

Disclaimer
This job description describes the general nature and level of work performed in this role. It is not intended to be an exhaustive list of all duties skills responsibilities knowledge etc. These may be subject to change and additional functions may be assigned as needed by management.

Job -

Schedule -

Shift -

Travel -

Relocation -

Equal Opportunity Employer (EEO) -

HP Inc. provides equal employment opportunity to all employees and prospective employees without regard to race color religion sex national origin ancestry citizenship sexual orientation age disability or status as a protected veteran marital status familial status physical or mental disability medical condition pregnancy genetic predisposition or carrier status uniformed service status political affiliation or any other characteristic protected by applicable national federal state and local law(s).

Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence.

For more information review HPsEEO Policy or read about your rights as an applicant under the law here: Know Your Rights: Workplace Discrimination is Illegal