Cybersecurity Compliance Specialist

We are seeking a highly skilled Cybersecurity Compliance Specialist with broad experience across security controls, risk management, and assurance activities. This role is ideal for a professional with 5–8 years of experience spanning cybersecurity, IT risk, and compliance, looking to make an impact in a dynamic, forward-thinking organization within HP.

As a Cybersecurity Compliance Specialist, you will be responsible for ensuring that our organization and its third-party vendors meet the necessary cybersecurity standards, regulations, and industry best practices. You will serve as a key connector across teams, translating security and compliance requirements into practical, risk-based outcomes.

Responsibilities

Third-Party Assurance:

• Support the third-party assurance program, ensuring that for compliance-related questions and assessments (like periodic due diligence questionnaires) for existing HP clients are responded to timely.
• Collaborate closely with other Cybersecurity and business teams to Support information security audits and assessments by second parties (customers, entities).
• Support general cybersecurity compliance and HP Security Posture inquiries

• Support the implementation of cybersecurity compliance frameworks (NIST, CIS, GDPR, CCPA, etc.) across the company.
• Help develop and maintain a comprehensive compliance roadmap to ensure ongoing adherence to all relevant standards, laws, and regulations.
• A request to respond to questions related to Security standards and regulations like compliance with NIS2/DORA requirements.
• Support for new or maintenance of cybersecurity certifications by third parties

• Collaborate with cybersecurity, IT, engineering, legal, and business teams to embed security and compliance into day-to-day operations.
• Translate technical security concepts into clear, business-relevant language for diverse stakeholders.
• Support continuous improvement initiatives to streamline assessment, audit, and compliance processes.

• Four-year or Graduate Degree in Computer Science, Information Technology, or a related field (or equivalent experience).
• Typically 5–8 years of experience in cybersecurity, IT risk, compliance, or a related discipline.

CISM, CRISC, CISSP, or equivalent

Knowledge & Skills

ISO 27001 Lead Auditor/Implementer (preferred but not required)

• Cybersecurity Compliance
• Cybersecurity governance
• Cybersecurity policies
• Auditing
• Risk management
• Automation
• Risk analysis
• Issue tracking
• Security controls
• Operating systems

• Effective Communication
• Results Orientation
• Learning Agility
• Digital Fluency
• Customer Centricity