Cybersecurity Customer Assurance Lead

Lead the strategy and growth of a global customer assurance capability within HPE’s Customer Trust Office.

Responsibilities

• Define and implement the strategy, operating model, governance, and service approach for the Customer Trust Office within the Cybersecurity Centre of Excellence.
• Build and mature a scalable global customer assurance capability.
• Serve as a senior cybersecurity adviser to Sales, account teams, business leaders, and internal stakeholders during customer opportunities and assurance engagements.
• Represent the cybersecurity organization in external customer meetings, security reviews, audits, and executive-level discussions.
• Lead complex or strategically important customer assurance engagements requiring tailored analysis, cross-functional coordination, or senior-level judgement.
• Communicate HPE’s cybersecurity posture, risk-management practices, and control environment clearly to technical and non-technical audiences.
• Assess complex customer questions and set an appropriate response strategy in partnership with Cybersecurity, Privacy, Legal, Compliance, Product Security, Engineering, and business stakeholders.
• Establish scalable approaches for customer security questionnaires, due-diligence assessments, audit requests, and related assurance activities.
• Define governance and approval mechanisms for customer-facing cybersecurity information to ensure responses are accurate, consistent, current, and supported by evidence.
• Build an authoritative knowledge capability combining approved responses, supporting evidence, audit artefacts, and reusable customer trust materials.
• Develop partnerships with cybersecurity and business subject-matter experts to create, validate, and improve authoritative content.
• Identify recurring sources of customer concern and use insights to improve content, processes, controls, and the broader customer trust strategy.
• Design approaches that reduce duplication and improve quality through standardization, workflow automation, AI-assisted processes, and knowledge-management capabilities.
• Define measures of program effectiveness, including customer experience, quality, demand, efficiency, business impact, and capability maturity.
• Develop standards and guidance for customer-facing cybersecurity communications.
• Provide expertise, guidance, and mentorship to colleagues supporting customer trust and assurance activities.
• Monitor relevant cybersecurity, assurance, privacy, audit, regulatory, and customer developments and evaluate implications for engagements.

Requirements

• Typically 8 to 10 years of relevant experience in cybersecurity assurance, customer assurance, cybersecurity risk management, IT audit, security governance, compliance, or related disciplines.
• Significant experience leading or directly supporting external customer cybersecurity discussions, assurance reviews, audits, due-diligence activities, or executive briefings.
• Broad working knowledge across cybersecurity domains, including relationships between security strategy, governance, risk, controls, technology, and operations.
• Experience communicating with customer security teams, auditors, risk and compliance professionals, procurement teams, sales organizations, and senior business stakeholders.
• Proven ability to translate complex cybersecurity topics into clear, accurate, audience-appropriate communications.
• Demonstrated independent judgement on complex issues by integrating multiple perspectives.
• Ability to influence across organizational boundaries without relying on direct authority.
• Experience building, transforming, or materially improving assurance, trust, governance, audit, risk, or compliance capabilities.
• Strong written, verbal, presentation, facilitation, and relationship-management skills.
• Ability to manage competing priorities while maintaining judgement, attention to detail, and accountability.
• Ability to identify opportunities for standardization and automation while preserving required judgement for complex engagements.
• Interest in applying AI-assisted workflows, automation, and knowledge-management to improve quality, scalability, and effectiveness.
• Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, Business, Audit, or a related field, or equivalent professional experience.

Technologies

• AI-assisted processes
• Workflow automation
• Knowledge-management capabilities
• ISO/IEC 27001
• NIST Cybersecurity Framework
• SOC reporting
• PCI DSS

Hybrid work model

• Hybrid role based in Spring, TX
• Average expectation: 2 days per week working from an HPE office

Benefits

• Comprehensive suite of benefits supporting physical, financial and emotional wellbeing
• Programs for personal and professional development aligned to career goals

What success looks like

• Establish credibility as a trusted cybersecurity adviser to Sales, account teams, cybersecurity leadership, and internal partners.
• Represent the organization confidently in strategic customer assurance discussions.
• Launch and operationalize the Customer Trust Office with clear remit, operating model, governance structure, and engagement approach.
• Deliver a consistent and trusted approach for communicating with customers about cybersecurity.
• Create a scalable source of approved responses, supporting evidence, audit artefacts, and customer trust resources.
• Improve quality, consistency, and timeliness of customer assurance engagements.
• Introduce repeatable approaches that reduce duplication while maintaining appropriate flexibility for complex or strategically important customers.
• Operationalize workflow automation, AI-assisted processes, and improved knowledge-management capabilities.
• Establish meaningful reporting to support prioritization, accountability, business decisions, and continuous improvement.
• Build sustainable capabilities to meet growing customer demand without dependence on a single individual.

Desired certifications

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Cloud Security Professional (CCSP)
• ISO/IEC 27001 Lead Implementer or Lead Auditor

Valuable additional experience

• Representing a cybersecurity, assurance, trust, risk, or compliance organization in strategic customer meetings
• Supporting major technology, cloud, managed-services, enterprise software, infrastructure, AI, or cybersecurity customers
• Developing or transforming customer assurance, customer trust, governance, audit, risk, or compliance program(s)
• Working with frameworks and standards such as ISO/IEC 27001, the NIST Cybersecurity Framework, SOC reporting, PCI DSS, or comparable frameworks
• Understanding how cybersecurity regulatory requirements and customer expectations vary across industries and regions
• Designing governance frameworks, approval models, knowledge repositories, trust centers, and reusable assurance content
• Selecting, implementing, or improving GRC, workflow, automation, trust-portal, or knowledge-management solutions
• Using customer insights and recurring assurance themes to influence process, program, or control improvements
• Coaching or mentoring colleagues and building customer-facing cybersecurity capability across teams

Job details

• Job category: Information Technology
• Job level: Expert
• Location: Spring, TX (hybrid)
• Salary (Texas): USD 109,000 - 251,000 per year base salary; variable incentives may also be offered

Education

• Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, Business, Audit, or a related field (or equivalent professional experience)

Minimum experience

• 8+ years