Cybersecurity Compliance Specialist

Job Summary

We areseekinga highly skilledCybersecurity Compliance Specialistwith broad experience across security controls risk management and assurance activities. This role is ideal for a professional with58years of experience spanning cybersecurity IT risk and compliance looking to make an impact in a dynamic forward-thinking organization within HP.

As a Cybersecurity Compliance Specialist you willbe responsible forensuring that our organization and its third-party vendors meet the necessary cybersecurity standards regulations andindustrybest practices. You will serve as a key connector across teams translating security and compliance requirements into practical risk-based outcomes.

Responsibilities

Third-Party Assurance:

• Support the third-party assurance program ensuringthat forcompliance-related questions and assessments (like periodic due diligence questionnaires) for existing HP clients are responded totimely.

• Collaborate closely with other Cybersecurity and business teams to Support information security audits and assessments by second parties (customers entities).

• Support general cybersecurity compliance and HP Security Posture inquiries

Compliance Program Activities

• Support the implementation of cybersecurity compliance frameworks (NIST CIS GDPR CCPA etc.) across the company.

• Help develop andmaintaina comprehensive compliance roadmap to ensure ongoing adherence to all relevant standards laws and regulations.

• A requestto respond to questions related to Security standards and regulations like compliance withNIS2/DORA requirements.

• Support for new or maintenance of cybersecurity certifications by third parties

Cross-Functional Engagement

• Collaborate with cybersecurity IT engineering legal and business teams to embed security and compliance into day-to-day operations.

• Translate technical security concepts into clear business-relevant language for diverse stakeholders.

• Support continuous improvement initiatives to streamline assessment audit and compliance processes.

Education & Experience Recommended

• Four-year or Graduate Degree in Computer Science Information Technology or a related field (or equivalent experience).

• Typically58yearsof experience in cybersecurity IT risk compliance or a related discipline.

Preferred Certifications

CISM CRISC CISSP or equivalent

ISO 27001 Lead Auditor/Implementer(preferred but not)

Knowledge & Skills

Cybersecurity Compliance

Cybersecurity governance

Cybersecurity policies

Auditing

Risk management

Automation

Risk analysis

Issue tracking

Security controls

Operating systems