Cybersecurity Policy Writer & Governance Lead

** Job Summary*
* We are seeking a strategic and detail-driven  
** Cybersecurity Policy Writer & Governance Lead
** to design, implement, and continuously enhance cybersecurity policies and governance frameworks. This role is critical in strengthening HP's security posture, ensuring regulatory compliance, and embedding risk-aware practices across the company.

The ideal candidate combines deep expertise in cybersecurity standards and regulatory requirements with the ability to translate complex technical concepts into clear, actionable, business-aligned policies. This role requires strong cross-functional collaboration, executive communication skills, and a proactive approach to risk management.

** Key Responsibilities*
* ** Policy Development & Governance*
* + Lead the development, review, and lifecycle management of cybersecurity policies, standards, and specifications.

+ Establish and mature governance frameworks aligned with industry-best practices and regulatory expectations.

+ Ensure policies evolve in response to emerging threats, business changes, and regulatory updates.

** Regulatory Compliance & Risk Alignment*
* + Maintain strong knowledge of regulatory and industry frameworks such as NIST Cybersecurity Framework, ISO/IEC 27001, CIS V8.1, General Data Protection Regulation, and PCI DSS.

+ Ensure alignment between cybersecurity controls, enterprise risk management practices, and compliance obligations.

+ Provide authoritative guidance on policy interpretation, control implementation, and exception management.

** Stakeholder Engagement*
* + Partner with IT, Legal, Compliance, Risk, Audit, and business units to ensure policies are practical, enforceable, and business-aligned.

+ Influence senior leadership through reporting on governance metrics, compliance posture, and risk exposure.

** Training & Awareness*
* + Support the development and delivery of cybersecurity awareness and policy training programs.

+ Promote a culture of security accountability and governance maturity across the organization.

** Monitoring & Reporting*
* + Define and track governance KPIs and KRIs.

+ Monitor policy adherence and control effectiveness.

+ Provide executive-level reporting on compliance trends, risk insights, and remediation progress.

** Qualifications*
* + Bachelor's or Graduate degree in Computer Science, Information Technology, Cybersecurity, or related discipline (or equivalent experience).

+ 7-10 years of progressive experience in cybersecurity governance, policy development, risk management, or compliance.

+ Demonstrated experience drafting enterprise-level cybersecurity policies and standards.

+ Strong knowledge of global regulatory and cybersecurity control frameworks.

+ Exceptional written and verbal communication skills, with the ability to translate technical requirements into business-focused guidance.

+

Experience with policy lifecycle management tools or governance platforms preferred.

+ Professional certifications such as CISSP, CISM, CRISC, or ISO 27001/NIST-related certifications are highly desirable.

+ Working understanding of Artificial Intelligence is a plus.

** Technical & Governance Expertise*
* + Cybersecurity Governance & Operating Models

+ Policy & Standards Development

+ Regulatory Compliance & Audit Readiness

+ Security Controls & Control Mapping

+ Automation & Governance Tooling

** Leadership & Enterprise Skills*
* + Executive Communication

+ Cross-Functional Influence

+ Results Orientation

+ Learning Agility

+ Customer-Centric Mindset

** Impact & Scope*
* + Influences cybersecurity governance strategies across multiple teams and business units.

+ May lead projects or initiatives related to governance transformation and compliance readiness.

+ Drives enterprise-wide consistency in policy adoption and control maturity.

** Complexity*
* + Operates within established frameworks while addressing complex regulatory and cybersecurity challenges.

+ Exercises independent judgment in interpreting standards and resolving governance issues.

+ Balances risk, compliance, and operational practicality in decision-making.

The pay range for this role is  **$105,050
** to  **$161,800
** USD annually with additional opportunities for pay…