Program Manager - Cybersecurity Risk Management

Job Summary
As the world around us becomes more connected and more digital, there are increased opportunities for disruption due to cybersecurity attacks. The need for companies, products, and services to be secure is more important than ever in this constantly changing landscape.

• The HP Program Manager - Cybersecurity Risk Management is responsible for leading important cybersecurity programs across supply chain operations for a complex global company. The role includes partnering with teams within our supply chain organization and third-party partners to review business operations, identify areas of Cybersecurity Risk, and drive the implementation of ongoing cybersecurity practices and process improvements.
• The person in this role will be responsible for identifying and implementing a strategy and plan to drive remediation and closure of Cybersecurity Risks that have already been identified. This includes communicating with key stakeholders, influencing business prioritization and funding requirements, and tracking milestones against committed timelines.

In this role, you will also be responsible for the development of key relationships across the business to become a trusted partner and subject matter expert to train and influence on cybersecurity initiatives.

As cybersecurity trends and risks continue to evolve and supply chain transformation and resilience efforts are implemented, this role will play a key function in keeping business operations aligned with current and future Cybersecurity Risk Management best practices.

The position reports to the Supply Chain Cybersecurity Business Information Security Officer (BISO) and works closely with teams across Supply Chain Operations, HP Corporate Cybersecurity, IT, Legal, and Business Units to help protect HP’s infrastructure and products.

This is a hybrid work position which requires both in office work and the flexibility of some work from home.
Responsibilities

• Drives complex projects from initiation to completion including identifying key stakeholders, reviewing business processes, and recommending cybersecurity process improvements to business operations
• Provides leadership and guidance about cybersecurity new and best practices to business operations teams
• Leads risk remediation program to communicate and drive resolution of identified Cybersecurity Risks in the business
• Partners with business operations and third-party partners to assess compliance to cybersecurity standards and drives Cybersecurity Risk Management process improvements
• Prepares and presents Risk Management reports, scorecards, and briefings as required
• Understands HP’s business and supply chain strategy and how cybersecurity fits into business success
• Monitors industry cybersecurity threats, cybersecurity best practices, regulatory changes, corporate updates, and geo-political changes impacting HP’s supply chain security

Education & Experience Recommended

• Four-year or Graduate Degree preferably in supply chain operations, computer science, information systems, cybersecurity, or any other related discipline or commensurate work experience or demonstrated competence.
• Typically has 10+ years of relevant experience preferably in program management, project management, cybersecurity, supply chain operations or a related field.

Preferred Certifications

• Have or obtain upon hire Technical Cybersecurity Certification through one of the recognized bodies: (ICS)2, CompTIA, ISACA, etc.

Knowledge & Skills

• Excellent program management skills including the ability to evaluate complex business processes, develop a structure and scope to review the process, and develop methods, techniques, and criteria to improve cybersecurity practices in business operations
• In-depth Cyber and IT security knowledge and understanding of Cyber and IT security risks, threats, and prevention measures
• Superior verbal and written communication, leadership, consulting, influence, negotiation, presentation, and problem-solving skills

Cross-Org Skills

• Effective Communication
• Results Orientation
• Learning Agility
• Digital Fluency

Impact & Scope

• Impacts large functions and leads large, cross-division functional teams or projects.

About the Team

• The Supply Chain Cybersecurity team is a key pillar of the Supply Chain organization responsible for protecting our supply chain and products against cyber threats. The Supply Chain Cybersecurity team is a group of cybersecurity and supply chain professionals who collaborate with business and functional stakeholders as trusted advisors to effectively manage Cybersecurity Risks in our manufacturing supply chain operations.

Disclaimer

• This job description describes the general nature and level of work performed in this role. It is not intended to be an exhaustive list of all duties, skills, responsibilities, knowledge, etc. These may be subject to change and additional functions may be assigned as needed by management.