Business Information Security Officer (BISO), HPE Operations

Hewlett Packard Enterprise • Spring, TX

9d • $140,000 - $321,000 • Hybrid

About The Position

The Business Information Security Officer (BISO) for HPE Operations is a highly visible senior individual contributor in Hewlett Packard Enterprise’s Cybersecurity & Digital Risk Management (CDRM) organization. The BISO serves as the primary cybersecurity liaison and trusted advisor to HPE Operations, helping the business reduce risk while enabling its strategic and operational priorities. HPE Operations oversees delivery of products and services across HPE, including a global supply chain.

The role reports to the VP and Head of the Office of the CISO, with a dotted-line relationship to HPE Operations leadership. Working with Operations, the Cybersecurity Third-Party Risk team, and other CDRM functions, the BISO improves risk visibility, clarifies accountability, supports timely risk reduction, and helps leaders make informed decisions. The position requires building relationships across a complex global organization and translating technical and risk matters into business impact, practical options, and actionable recommendations.

The role is hybrid, with an average of two days per week working from an HPE office. The stated annual base salary range is USD 140,000–321,000 in Georgia and Texas; variable incentives may also be offered.

Requirements

• 10 or more years of experience in cybersecurity, information security, enterprise risk management, compliance, operational risk, technology risk, or a related discipline.
• Experience partnering directly with senior business and operational leaders in a large, complex, global organization.
• Strong understanding of enterprise cybersecurity principles, risk management practices, security controls, and governance frameworks.
• Experience supporting third-party risk management, supply-chain risk, and/or operational risk programs.
• Experience working with global regulatory, legal, privacy, or contractual cybersecurity requirements.
• Ability to translate complex technical, cybersecurity, and risk issues into clear business language, practical options, and actionable recommendations.
• Experience facilitating risk reviews, documenting risk decisions, establishing accountable ownership, and tracking remediation or risk-treatment activity.
• Experience preparing and presenting cybersecurity, risk, compliance, or resilience matters to executive and senior leadership audiences.
• Strong stakeholder management, influencing, consulting, and cross-functional leadership skills.
• Ability to lead through influence and drive outcomes without direct authority.
• Strong written and verbal communication skills, including the ability to prepare concise executive briefings and reports.
• Sound judgment and ability to work effectively in complex, ambiguous, or rapidly changing situations.
• Ability to balance cybersecurity risk reduction with operational priorities and business objectives.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business, or a related field, or equivalent practical experience.

Nice To Haves

• Relevant cybersecurity, risk, audit, or information security certification, such as CISSP, CISM, CRISC, CISA, an ISO 27001-related certification, or an equivalent recognized professional qualification.
• Experience working with operations, supply chain, manufacturing, global services, procurement, logistics, or other enterprise business functions.
• Experience supporting large-scale business, operational, technology, or digital transformation initiatives.
• Familiarity with recognized cybersecurity and risk frameworks, such as the NIST Cybersecurity Framework, ISO/IEC 27001, and CIS Controls.
• Experience supporting cybersecurity incident response, crisis management, business continuity, disaster recovery, or operational resilience.
• Experience establishing or improving a BISO, cybersecurity business-partnering, or security engagement model.
• Understanding of technology, supplier, and ecosystem dependencies within complex operational environments.

Responsibilities

• Serve as the primary cybersecurity liaison and trusted advisor for HPE Operations.
• Build relationships with Operations leaders and understand their strategic priorities, critical processes, dependencies, and risk landscape.
• Partner with Operations leaders to provide practical, proportionate, risk-informed cybersecurity guidance that enables business initiatives.
• Translate cybersecurity, technology, operational, and third-party risks into clear business impact, options, recommendations, and decision points.
• Work with the Cybersecurity Third-Party Risk team and Operations stakeholders to identify, assess, communicate, and manage supplier, vendor, and ecosystem risks.
• Work with the Cybersecurity Vulnerability Management team and Operations stakeholders to identify, assess, communicate, and mitigate vulnerabilities.
• Facilitate cybersecurity risk reviews, security assessments, prioritization discussions, and remediation planning.
• Establish ownership of identified risks and support escalation, governance, and follow-through on remediation actions.
• Facilitate risk-based decisions, including documentation and escalation of accepted or residual risks when remediation is not practical, timely, or proportionate.
• Support operational resilience by helping incorporate cybersecurity controls and recovery considerations into critical operational processes and dependencies.
• Coordinate business engagement during significant cybersecurity incidents, including communications, decision support, business impact assessment, escalation, recovery, and post-incident follow-through.
• Monitor emerging cybersecurity, operational, third-party, legal, and regulatory risks relevant to HPE Operations and communicate potential business impacts.
• Partner across CDRM functions—including Governance, Risk & Compliance; Architecture & Engineering; Identity and Access Management; Product Security and Cyber Defense—as well as Legal and Privacy.
• Track risk-reduction activity and provide visibility into progress, owners, blockers, decisions, dependencies, and residual risk.
• Help establish and continuously improve the engagement model among HPE Operations, CDRM, and the Cybersecurity Third-Party Risk team.

Benefits

• Comprehensive benefits intended to support physical, financial, and emotional wellbeing for employees and their loved ones.
• Career development programs to help employees pursue professional goals.
• Variable incentives may also be offered.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior