Cybersecurity Customer Assurance Lead

Location: Spring, Texas, United States of America

This role has been designed as 'Hybrid' with a requirement that you will work on average 2 days per week from an HPE office.

Who We Are

Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way people live and work. We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud, so they can turn insights into outcomes at the speed required to thrive in today’s complex world. Our culture thrives on finding new and better ways to accelerate what’s next. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good. If you are looking to stretch and grow your career our culture will embrace you. Open up opportunities with HPE.

About Our Cybersecurity Team

Are you passionate about building customer trust through cybersecurity?

HPE’s Cybersecurity team protects the organization while enabling innovation, business growth, and customer confidence. We work across the company to develop effective, scalable security practices that support our customers and the business.

Within the Cybersecurity Centre of Excellence, we are establishing a Customer Trust Office to give customers consistent, accurate, and transparent information about our cybersecurity programm. We are looking for an experienced cybersecurity professional to build this capability and represent our security organization in important internal and external customer engagements.

About You

You combine broad cybersecurity expertise with strong customer-facing communication and relationship-building skills.

You can engage confidently with customer security leaders, auditors, sales teams, executives, procurement organizations, and technical specialists. You listen carefully, identify the concern underlying a question, and translate complex cybersecurity topics into clear, accurate business language.

You are comfortable taking ownership of high-profile discussions and exercising sound judgement when information is incomplete or stakeholder priorities differ. You balance customer needs with appropriate cybersecurity, legal, privacy, regulatory, and business considerations.

You are energized by creating capabilities that do not yet exist, bringing clarity to ambiguous problems, and designing approaches that scale beyond an individual engagement. You look for recurring gaps, improve the system rather than repeatedly solving the same problem, and measure your impact through the sustainable capabilities you create.

About the Role

As Customer Assurance Lead, you will define the strategy and lead the establishment and maturation of our Customer Trust Office. You will serve as a senior cybersecurity adviser to internal stakeholders and external customers, enabling them to understand our security strategy, controls, practices, and approach to managing cyber risk.

You will partner with Sales, account teams, Cybersecurity, Privacy, Legal, Compliance, Product Security, Engineering, and other business functions to support strategic opportunities and customer relationships. You will lead complex assurance engagements and represent the organization in customer meetings, security reviews, audits, and executive briefings where broad cybersecurity expertise, sound judgement, and clear communication are essential.

This role goes beyond completing customer security questionnaires or responding to individual requests. You will shape the operating model, governance, knowledge resources, and technology-enabled processes that allow customer assurance activities to operate consistently and at scale. You will improve how the work gets done and build a capability that continues delivering value as customer demand evolves.

You Will Be Responsible For

• Defining and implementing the strategy, operating model, governance, and service approach for the Customer Trust Office.
• Building and maturing a scalable global customer assurance capability.
• Acting as a senior cybersecurity adviser to Sales, account teams, business leaders, and other internal stakeholders during customer opportunities and assurance engagements.
• Representing the cybersecurity organization in external customer meetings, security reviews, audits, and executive-level discussions.
• Leading complex or strategically important customer assurance engagements that require tailored analysis, cross-functional coordination, or senior-level judgement.
• Communicating the organization’s cybersecurity posture, risk-management practices, and control environment clearly and credibly to technical and non-technical audiences.
• Assessing complex customer questions and determining an appropriate response strategy in partnership with Cybersecurity, Privacy, Legal, Compliance, Product Security, Engineering, and business stakeholders.
• Establishing scalable approaches for responding to customer security questionnaires, due-diligence assessments, audit requests, and related assurance activities.
• Defining governance and approval mechanisms for customer-facing cybersecurity information so that responses are accurate, consistent, current, and appropriately supported.
• Building an authoritative knowledge capability that brings together approved responses, supporting evidence, audit artefacts, and reusable customer trust materials.
• Developing productive partnerships with cybersecurity and business subject-matter experts to create, validate, and improve authoritative content.
• Identifying recurring sources of customer concern and using those insights to improve content, processes, controls, and the broader customer trust strategy.
• Designing approaches that reduce duplication and improve quality through standardization, workflow automation, AI-assisted processes, and knowledge-management capabilities.
• Defining meaningful measures of programm effectiveness, customer experience, quality, demand, efficiency, business impact, and capability maturity.
• Developing standards and guidance for customer-facing cybersecurity communications.
• Providing expertise, guidance, and mentorship to colleagues contributing to customer trust and assurance activities.
• Monitoring relevant cybersecurity, assurance, privacy, audit, regulatory, and customer developments and evaluating their implications for customer engagements.

What Success Looks Like

During your first 12 months, you will

• Establish credibility as a trusted cybersecurity adviser to Sales, account teams, Cybersecurity leadership, and other internal partners.
• Represent the organization confidently and independently in strategic customer assurance discussions.
• Launch and operationalize the Customer Trust Office with a clear remit, operating model, governance structure, and engagement approach.
• Establish a consistent and trusted approach to communicating with customers about cybersecurity.
• Create a scalable source of approved responses, supporting evidence, audit artefacts, and customer trust resources.
• Improve the quality, consistency, and timeliness of customer assurance engagements.
• Build repeatable approaches that reduce duplication while providing appropriate flexibility for complex or strategically important customers.
• Introduce practical workflow automation, AI-assisted processes, and improved knowledge-management capabilities.
• Establish meaningful reporting that supports prioritization, accountability, business decisions, and continuous improvement.
• Build sustainable capabilities that can meet growing customer demand without depending on the knowledge or involvement of a single person.

Skills, Experience and Education

Typically, 8 to 10 years of relevant experience in cybersecurity assurance, customer assurance, cybersecurity risk management, IT audit, security governance, compliance, or a related discipline.

Significant experience leading or directly supporting external customer cybersecurity discussions, assurance reviews, audits, due-diligence activities, or executive briefings.

Broad working knowledge across cybersecurity domains, including the relationships between security strategy, governance, risk, controls, technology, and operations.

Experience communicating with customer security teams, auditors, risk and compliance professionals, procurement teams, sales organizations, and senior business stakeholders.

Demonstrated ability to translate complex cybersecurity matters into clear, accurate, and audience-appropriate communications.

Experience exercising independent judgement on complex issues and bringing together multiple perspectives to determine an appropriate course of action.

Demonstrated ability to influence across organizational boundaries without relying on direct authority.

Experience building, transforming, or materially improving an assurance, trust, governance, audit, risk, or compliance capability.

Strong written, verbal, presentation, facilitation, and relationship-management skills.

Ability to manage competing priorities while maintaining sound judgement, attention to detail, and accountability for outcomes.

Ability to identify opportunities for standardization and automation without losing the judgement needed for complex customer engagements.

Interest in applying AI-assisted workflows, automation, and knowledge-management capabilities to improve quality, scalability, and organizational effectiveness.

Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, Business, Audit, or a related field, or equivalent professional experience.

These expectations are consistent with HPE’s Expert-level profile, which emphasizes advanced subject-matter knowledge, complex problem-solving, significant independent judgement, external customer representation, cross-functional leadership, process improvement, and mentoring.

Desired Certifications

One or more of the following certifications, or an equivalent relevant credential, is strongly desired:

Certified Information Systems Security Professional (CISSP)

Certified Information Systems Auditor (CISA)

Certified Information Security Manager (CISM)

Certified in Risk and Information Systems Control (CRISC)

Certified Cloud Security Professional (CCSP)

ISO/IEC 27001 Lead Implementer or Lead Auditor

Certifications will strengthen a candidate’s application but are not a substitute for demonstrable customer-facing cybersecurity expertise, sound judgement, and experience building scalable assurance capabilities.

Additional Experience That Would Be Valuable

• Representing a cybersecurity, assurance, trust, risk, or compliance organization in strategic customer meetings.
• Supporting major technology, cloud, managed-services, enterprise software, infrastructure, AI, or cybersecurity customers.
• Developing or transforming customer assurance, customer trust, governance, audit, risk, or compliance programm's.
• Working with cybersecurity and assurance frameworks and standards such as ISO/IEC 27001, the NIST Cybersecurity Framework, SOC reporting, PCI DSS, or comparable frameworks.
• Understanding how cybersecurity regulatory requirements and customer expectations vary across industries and regions.
• Designing governance frameworks, approval models, knowledge repositories, trust centers, and reusable assurance content.
• Selecting, implementing, or improving GRC, workflow, automation, trust-portal, or knowledge-management solutions.
• Using customer insights and recurring assurance themes to influence process, programm, or control improvements.
• Coaching or mentoring colleagues and developing customer-facing cybersecurity capability across teams.

Why This Role Matters

Customer trust plays an important part in strategic relationships, customer decision-making, and sustainable business growth.

The Customer Assurance Lead will shape how the organization demonstrates its cybersecurity posture and responds to changing customer expectations. Success will not be measured simply by the volume of questionnaires or assessments completed. It will be measured by the creation of a trusted, scalable, and sustainable capability that improves transparency, strengthens customer confidence, increases consistency, and enables effective customer engagement.

Our Commitment to Inclusion

We recognize that strong candidates may not meet every desired qualification listed. If your experience is closely aligned with the role and you are excited about building customer trust through cybersecurity, we encourage you to apply.

We are committed to creating an inclusive environment where people with different backgrounds, experiences, and perspectives can contribute, grow, and succeed.

Accessibility

HPE is committed to creating an inclusive and accessible workplace and encourages applications from all qualified individuals, including those with disabilities. If you believe you require accommodation during any stage of the application or interview process, please submit your request by completing our secure form linked here.

Note: This option is reserved for applicants needing assistance/reasonable accommodation related to a disability.

What We Can Offer You

Health & Wellbeing

We strive to provide our team members and their loved ones with a comprehensive suite of benefits that supports their physical, financial and emotional wellbeing.

Personal & Professional Development

We also invest in your career because the better you are, the better we all are. We have specific programs catered to helping you reach any career goals you have — whether you want to become a knowledge expert in your field or apply your skills to another division.

Unconditional Inclusion

We are unconditionally inclusive in the way we work and celebrate individual uniqueness. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good.

Let's Stay Connected

Follow @HPECareers on Instagram to see the latest on people, culture and tech at HPE.

Job

Information Technology

Job Level

Expert

"The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level.

• United States of America: Annual Salary USD 109,000 - 251,000 in Texas

The listed salary range reflects base salary. Variable incentives may also be offered."

Information about employee benefits offered in the US can be found at https://myhperewards.com/main/new-hire-enrollment.html

HPE is an Equal Employment Opportunity/ Veterans/Disabled/LGBT employer. We do not discriminate on the basis of race, gender, or any other protected category, and all decisions we make are made on the basis of qualifications, merit, and business need. Our goal is to be one global team that is representative of our customers, in an inclusive environment where we can continue to innovate and grow together. Please click here: Equal Employment Opportunity.

Hewlett Packard Enterprise is EEO Protected Veteran/ Individual with Disabilities.

HPE will comply with all applicable laws related to employer use of arrest and conviction records, including laws requiring employers to consider for employment qualified applicants with criminal histories.

Recruitment Fraud Alert

We have become aware of an increase in fraudulent recruitment activities in which individuals impersonate our company or authorized recruitment agencies to offer fake employment opportunities. These scams may occur through false websites, emails, social media, or chat-based applications and often aim to obtain personal information or money. Please note that Hewlett Packard Enterprise (HPE), its direct and indirect subsidiaries and affiliated companies, and its authorized recruitment agencies/vendors will never charge a candidate a registration fee, hiring fee, or any other fee in connection with its recruitment and hiring process.

We also never request personal information such as back account details, Social Security numbers, or national IDs via social media or chat applications.

All legitimate job opportunities will come through official company channels, and candidates are responsible for verifying the credentials of any third party claiming to represent the company. Any reliance on fraudulent communication is at the individual’s own risk, and HPE disclaims legal liability for any resulting damages. If you suspect recruitment fraud, do not share personal information or make any payments and report the incident to your local authorities immediately.

Additional Locations: Galway, Galway, Ireland, Amsterdam, Netherlands