Business Information Security Officer (BISO), HPE Operations

Business Information Security Officer (BISO), HPE Operations

This role has been designed as 'Hybrid' with a requirement that you will work on average 2 days per week from an HPE office.

Who We Are:

Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way people live and work. We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud, so they can turn insights into outcomes at the speed required to thrive in today’s complex world. Our culture thrives on finding new and better ways to accelerate what’s next. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good. If you are looking to stretch and grow your career our culture will embrace you. Open up opportunities with HPE.

Job Description:

About Our Cybersecurity Team

Are you ready to make an impact at one of the world’s leading technology companies?

At HPE, cybersecurity is embedded in how we operate, innovate, and serve our customers. Our Cybersecurity & Digital Risk Management (CDRM) organization partners across HPE to reduce risk, improve resilience, and enable secure business outcomes.

We are looking for an experienced cybersecurity leader to serve as the Business Information Security Officer for HPE Operations. You will shape and build how cybersecurity partners with Operations—creating practical solutions, introducing new ways to identify and reduce risk, and bringing together business and cybersecurity teams to drive measurable risk reduction outcomes.

If you are energized by building something new, challenging established approaches, and helping leaders make informed decisions at scale, we would like to hear from you.

As the Business Information Security Officer for HPE Operations, you will be a highly visible senior individual contributor reporting to the VP and Head of Office of the CISO with in the global cybersecurity organization, with a dotted line to HPE Operations leadership. HPE Operations oversees the delivery of products and services across HPE, including a global supply chain which ships 58 terabytes of storage and two servers every 60 seconds to customers around the world.

Working closely with HPE Operations, the Cybersecurity Third-Party Risk team, and other CDRM functions, you will help improve risk visibility, clarify accountability, support timely risk reduction, and facilitate informed business decisions. You will lead through influence, establish effective relationships across a complex global organization, and translate technical and risk matters into clear business impact, practical options, and actionable recommendations.

Key Responsibilities

You will be responsible for:

• Serving as the primary cybersecurity liaison and trusted advisor for HPE Operations.
• Building effective relationships with Operations leaders and developing a strong understanding of their strategic priorities, critical processes, dependencies, and risk landscape.
• Partnering with Operations leaders to enable business initiatives through practical, proportionate, and risk-informed cybersecurity guidance.
• Translating complex cybersecurity, technology, operational, and third-party risks into clear business impact, options, recommendations, and decision points.
• Partnering with the Cybersecurity Third-Party Risk team and Operations stakeholders to identify, assess, communicate, and manage supplier, vendor, and ecosystem risks that could affect operational performance, resilience, or security.
• Partnering with the Cybersecurity Vulnerability Management team and Operations stakeholders to identify, assess, communicate, and mitigate vulnerabilities that could affect operational performance, resilience, or security.
• Facilitating cybersecurity risk reviews, security assessments, prioritization discussions, and remediation planning with accountable business and cybersecurity stakeholders.
• Establishing clear ownership of identified risks and supporting appropriate escalation, governance, and follow-through for agreed remediation actions.
• Facilitating risk-based decision-making, including the clear documentation and escalation of accepted or residual risks when remediation is not practical, timely, or proportionate.
• Supporting operational resilience by helping ensure appropriate cybersecurity controls and recovery considerations are incorporated into critical operational processes and dependencies.
• Coordinating business engagement during significant cybersecurity incidents, including stakeholder communication, decision support, business impact assessment, escalation, recovery, and post-incident follow-through.
• Monitoring emerging cybersecurity, operational, third-party, legal, and regulatory risks relevant to HPE Operations and communicating their potential business impact.
• Partnering across CDRM, including Governance, Risk & Compliance, Architecture & Engineering, Identity and Access Management, Product Security and Cyber Defense, as well as Legal and Privacy, to deliver coordinated outcomes.
• Tracking agreed risk-reduction activity and providing transparent visibility of progress, accountable owners, blockers, decisions, dependencies, and residual risk.
• Helping establish and continuously improve the engagement model between HPE Operations, CDRM, and the Cybersecurity Third-Party Risk team.

About You

You are an experienced cybersecurity or risk professional who can operate effectively at the intersection of business strategy, operations, technology, and cybersecurity.

You bring strong business judgement, executive communication skills, and the ability to build credibility with senior leaders. You are comfortable working independently in a fast-paced, global environment and can provide direction across complex, cross-functional initiatives without relying on direct authority.

You can evaluate complex or ambiguous situations, identify practical options, and help stakeholders reach well-informed decisions. You communicate technical and risk issues clearly to non-technical audiences and balance security requirements with operational priorities and business objectives.

Required Skills and Experience

• 10+ years of experience in cybersecurity, information security, enterprise risk management, compliance, operational risk, technology risk, or a related discipline.
• Experience partnering directly with senior business and operational leaders in a large, complex, global organization.
• Strong understanding of enterprise cybersecurity principles, risk management practices, security controls, and governance frameworks.
• Experience supporting third-party risk management, supply-chain risk, and / or operational risk programs.
• Experience working with global regulatory, legal, privacy, or contractual cybersecurity requirements.
• Demonstrated ability to translate complex technical, cybersecurity, and risk issues into clear business language, practical options, and actionable recommendations.
• Experience facilitating risk reviews, documenting risk decisions, establishing accountable ownership, and tracking remediation or risk-treatment activity.
• Experience preparing and presenting cybersecurity, risk, compliance, or resilience matters to executive and senior leadership audiences.
• Strong stakeholder management, influencing, consulting, and cross-functional leadership skills.
• Demonstrated ability to lead through influence and drive outcomes without direct authority.
• Strong written and verbal communication skills, including the ability to prepare concise executive briefings and reports.
• Sound judgement and the ability to operate effectively in complex, ambiguous, or rapidly changing situations.
• Ability to balance cybersecurity risk reduction with operational priorities and business objectives.

Certifications and Qualifications

…