Job ID: 3005352

Applies advanced cyber security subject matter knowledge to manage Cybersecurity’s Governance & Compliance staff activities in solving common and complex business/technical issues within established policies. Current deliverables from this team: PCI compliance, Audit, ISO certification, Regulatory & Contractual Compliance, Merchant ID management, Cardholder Data Environment (CDE), Policy Standards & Specifications, Process House, Records Management, Privacy, Legal, and Business Continuity.

Manages HP employee individual contributors &/or supervisors, &/or non-HP employee contractors/consultants. Has accountability for results of major programs in terms of cost, strategy, results and people management. Provides guidance on process improvements and recommends changes in alignment with business tactics and strategy for area of responsibility. Plans, manages and monitors operational/tactical activities of Staff. Staff members' work may involve strategic and tactical issues. Recruits and supports development of direct staff members. As this is a “working manager” role, this manager may personally drive initiatives, projects &/or operational day2day “run” activities.

Work hours traditionally required to fulfill this role are expected to be 50+ hours per week.

In line with HP & HPIT policy, work is to be performed at an HP Site.

Responsibilities

Manages activities of Individual Contributor(s).

Accountable for department area(s) or location(s) with significant impact on business unit results, organizational strategy, and transformational activities. As this is a “working manager” role, this manager may personally drive initiatives, projects &/or operational day2day “run” activities.

Applies strong subject matter knowledge to manage staff activities in solving moderate to complex business/technical issues within established policies.

Directs and controls activities for business or IT area including one or more disciplines.

Plans, directs, and monitors operational activities of staff and drives the strategic plan for the team.

Ensures team meets or enables achievement of relevant Cybersecurity & IT metrics and commitments per business goals and objectives.

Provides technical as well as people leadership.

Exerts influence beyond the immediate team; demonstrates business acumen and applies it for effective business engagement with internal customers and effective management of programs and initiatives.

Drives change management in the team or immediate organization; takes personal ownership of the Cybersecurity strategy and drives support of it. 

Education and Experience Required

Typically a technical bachelor’s degree plus ten years minimum related experience with minimum of three years management experience in Cyber/Information Security or equivalent.

Knowledge and Skills

Demonstrated expertise within relevant field or discipline as well as a broader experience in other Cyber/Information Security functions/domains. Experience directing and controlling the activities of one or more functions. Industry Security Certification highly preferred: e.g. CISM, CISSP, CRISC, or CISA In-depth understanding of PCI DSS, ISO 27001/27002, and NIST Cybersecurity Frameworks

Impact/Scope

Provide time / resource estimates for assigned projects. Assigns work to others. Provides business and people leadership of assigned projects, initiatives, &/or operational run activities. Develops innovative solutions to business or technology problems. Work impacts internal Cybersecurity & IT customers and delivery of Cybersecurity & IT services or projects, typically geographically dispersed or globally.

Complexity

Creates business plans with one to three-year time horizon. Will own and manage budgetary responsibilities for all work in the assigned area of work.

Note: The above statements describe the general nature and level of work only. They are not an exhaustive list of all required responsibilities, duties and skills. Other duties may be added, or this description amended at any time.