Job Summary
| EU CRA, SOC 2 and PCI DSS; compliance-framework implementation; risk-assessment methods; Jira, Wiz and SBOM tooling; PMP and CISA certifications. |
Key Responsibilities
To provide program management, compliance, regulatory readiness, governance, audit support, technical documentation, vulnerability management, risk assessment, and evidence management services for product security and regulatory compliance initiatives across Hybrid Cloud products and services.
Supporting the implementation of the EU Cyber Resilience Act (CRA).
Backing additional compliance and assurance programs including SOC 2, PCI DSS, NIST Cybersecurity Framework (CSF), NIST Secure Software Development Framework (SSDF), ISO 27001, customer security reviews, supplier compliance assessments, internal audits, and emerging cybersecurity regulations as directed by HPE.
Establish scalable, repeatable, and audit-defensible compliance capabilities integrated into product development, release management, vulnerability management, operational governance, and lifecycle management processes.
Skill Requirements
EU CRA, SOC 2 and PCI DSS; compliance-framework implementation; risk-assessment methods; Jira, Wiz and SBOM tooling; PMP and CISA certifications