Business Information Security Officer (BISO), HPE Operations

Hewlett Packard Enterprise • Alpharetta, TX

8d • $140,000 - $321,000 • Hybrid

About The Position

Hewlett Packard Enterprise is seeking an experienced cybersecurity leader to serve as Business Information Security Officer (BISO) for HPE Operations. The role is a senior individual-contributor position within the global Cybersecurity & Digital Risk Management (CDRM) organization, reporting to the VP and Head of the Office of the CISO, with a dotted line to HPE Operations leadership. The BISO will serve as a trusted cybersecurity partner to Operations, shaping the engagement model between Operations, CDRM, and the Cybersecurity Third-Party Risk team.

The position works across a complex global organization to improve risk visibility, clarify accountability, support timely risk reduction, and enable informed business decisions. The BISO translates technical, cybersecurity, operational, and third-party risks into business impacts and practical recommendations; facilitates risk reviews and remediation planning; and coordinates business engagement during significant cybersecurity incidents. The role also supports operational resilience and tracks risk-reduction efforts, decisions, blockers, dependencies, and residual risks.

The position is hybrid and requires working an average of two days per week from an HPE office. The stated U.S. base salary range is $140,000–$321,000 annually in Georgia and Texas; variable incentives may also be offered. HPE describes benefits supporting physical, financial, and emotional wellbeing, as well as programs for personal and professional development.

Requirements

• At least 10 years of experience in cybersecurity, information security, enterprise risk management, compliance, operational risk, technology risk, or a related discipline.
• Experience partnering directly with senior business and operational leaders in a large, complex, global organization.
• Strong understanding of enterprise cybersecurity principles, risk management practices, security controls, and governance frameworks.
• Experience supporting third-party risk management, supply-chain risk, and/or operational risk programs.
• Experience working with global regulatory, legal, privacy, or contractual cybersecurity requirements.
• Ability to translate complex technical, cybersecurity, and risk issues into clear business language, practical options, and actionable recommendations.
• Experience facilitating risk reviews, documenting risk decisions, establishing accountable ownership, and tracking remediation or risk-treatment activity.
• Experience preparing and presenting cybersecurity, risk, compliance, or resilience matters to executive and senior leadership audiences.
• Strong stakeholder management, influencing, consulting, and cross-functional leadership skills.
• Ability to lead through influence and drive outcomes without direct authority.
• Strong written and verbal communication skills, including the ability to prepare concise executive briefings and reports.
• Sound judgment and ability to operate effectively in complex, ambiguous, or rapidly changing situations.
• Ability to balance cybersecurity risk reduction with operational priorities and business objectives.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business, or a related field, or equivalent practical experience.

Nice To Haves

• Relevant cybersecurity, risk, audit, or information security certification, such as CISSP, CISM, CRISC, CISA, an ISO 27001-related certification, or an equivalent recognized professional qualification.
• Experience working with operations, supply chain, manufacturing, global services, procurement, logistics, or other enterprise business functions.
• Experience supporting large-scale business, operational, technology, or digital transformation initiatives.
• Familiarity with recognized cybersecurity and risk frameworks such as the NIST Cybersecurity Framework, ISO/IEC 27001, and CIS Controls.
• Experience supporting cybersecurity incident response, crisis management, business continuity, disaster recovery, or operational resilience.
• Experience establishing or improving a BISO, cybersecurity business-partnering, or security engagement model.
• Understanding of technology, supplier, and ecosystem dependencies within complex operational environments.

Responsibilities

• Serve as the primary cybersecurity liaison and trusted advisor for HPE Operations.
• Build relationships with Operations leaders and understand their strategic priorities, critical processes, dependencies, and risk landscape.
• Provide practical, proportionate, risk-informed cybersecurity guidance that supports business initiatives.
• Translate cybersecurity, technology, operational, and third-party risks into clear business impacts, options, recommendations, and decision points.
• Partner with the Cybersecurity Third-Party Risk team and Operations stakeholders to identify, assess, communicate, and manage supplier, vendor, and ecosystem risks.
• Partner with the Cybersecurity Vulnerability Management team and Operations stakeholders to identify, assess, communicate, and mitigate relevant vulnerabilities.
• Facilitate cybersecurity risk reviews, security assessments, prioritization discussions, and remediation planning.
• Establish clear risk ownership and support escalation, governance, and follow-through on agreed remediation actions.
• Facilitate risk-based decisions, documenting and escalating accepted or residual risks when remediation is impractical, untimely, or disproportionate.
• Support operational resilience by helping incorporate appropriate cybersecurity controls and recovery considerations into critical processes and dependencies.
• Coordinate business engagement during significant cybersecurity incidents, including communications, decision support, business impact assessment, escalation, recovery, and post-incident follow-through.
• Monitor emerging cybersecurity, operational, third-party, legal, and regulatory risks relevant to HPE Operations and communicate potential business impacts.
• Partner with CDRM functions, including Governance, Risk & Compliance, Architecture & Engineering, Identity and Access Management, Product Security, and Cyber Defense, as well as Legal and Privacy.
• Track risk-reduction activities and provide visibility into progress, owners, blockers, decisions, dependencies, and residual risk.
• Establish and continuously improve the engagement model between HPE Operations, CDRM, and the Cybersecurity Third-Party Risk team.

Benefits

• Benefits supporting physical, financial, and emotional wellbeing for employees and their loved ones.
• Programs supporting personal and professional development and career goals.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior