Operational Security Manager

About the role

Lenovo is seeking an Operational Security Manager to lead cybersecurity incident response activities across its global Solutions Services Group. You will work closely with engineering, legal, compliance, and privacy teams to ensure incidents are handled, documented, and reported in line with the EU Cyber Resilience Act.

Key responsibilities

• Manage the full incident response lifecycle, including triage, investigation, containment, remediation, recovery, and post‑incident review.
• Coordinate response actions across Cybersecurity, Product Security, Engineering, IT, Legal, Compliance, Privacy, and external partners.
• Assess incidents and exploited vulnerabilities affecting EU‑marketed products to determine handling and notification requirements.
• Prepare and submit timely regulatory notifications with accurate incident, impact, mitigation, and remediation details.
• Provide technical leadership to continuously improve security processes, controls, and supporting technologies.

Required profile

• Proven experience in managing cybersecurity incidents in a complex, multinational environment.
• Strong understanding of regulatory frameworks, especially the EU Cyber Resilience Act.
• Ability to work effectively with cross‑functional teams and external partners.
• Excellent analytical and documentation skills to ensure precise reporting.

Required skills

• Knowledge of the EU Cyber Resilience Act and related compliance requirements.
• Hands‑on experience with cybersecurity incident response processes and tools.