GRC Certification Specialist
This role has been designed as 'Hybrid' with a requirement that you will work on average 2 days per week from an HPE office.
About our cybersecurity team
HPE's Cybersecurity team is looking for a dynamic and experienced GRC specialist to join our Cybersecurity team.
About the role
As GRC Certification Specialist at HPE, you will be responsible for monitoring and reporting on security programs related to customer facing applications and services. Your role will focus on maintaining the security and compliance of HPE products and cloud services and HPE certification and compliance efforts. You will leverage GRC expertise and audit experience to protect HPE applications and HPE customer data.
About You
You will have expertise in GRC tools and platforms to monitor and report on application security programs and their compliance. Your knowledge of AWS, Microsoft Azure, and Google Cloud Platform will enhance your ability to assess and advise on security issues within applications on these platforms. You will work independently and on high-impact projects in fast-paced environments, with advanced expertise across cyber and IT security.
Your experience with IT service accreditation, attestation, and certification frameworks such as CSA CCM, FedRAMP, PCI-DSS, SOC2, and ISO 27001, including how to obtain these accreditations and how to maintain them, will be critical. Strong communication skills are essential, enabling you to explain complex technical issues to non-technical audiences.
What You'll Do
You will be responsible for:
•Identifying security gaps and issues, working with Engineering and Program Management to address gaps, and monitoring remediation efforts.
•Providing actionable insights and recommendations to Engineering and Product Management to incorporate requirements from applicable assessment and regulatory frameworks such as SOC 2, ISO 27001, FedRAMP, and PCI DSS.
•Executing a compliance and accreditation program for each customer-facing service based on customer needs. Measuring progress and program health and presenting this information in dashboard form for consumption by upper management and executive leadership.
•Engaging with third party consultants, auditors, and assessors as necessary.
•Working closely with Cybersecurity Digital Risk Management, Engineering, Product Management and other teams to execute a shared responsibility model for as-a-service governance and ensure HPE's as-a-service program is effectively reflected in company governance activities.
What you need to bring
Education & Experience Requirements
•Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field or equivalent experience desired.
•4-10 years of experience in cybersecurity, with a focus on Cybersecurity and GRC desired.
•Proven experience in audit and security program governance.
•Strong knowledge of Cybersecurity and cloud computing.
•Certifications: The following certifications are desired: CISSP, CCSP, CISA.
What We Can Offer You
•Health & Wellbeing: a comprehensive suite of benefits that supports physical, financial and emotional wellbeing.
•Personal & Professional Development: programs catered to helping you reach your career goals, whether becoming a knowledge expert in your field or applying your skills to another division.
