Cyber Resilience Act Compliance Manager

About the role

Lenovo is looking for a proactive manager to lead the operationalisation of the EU Cyber Resilience Act (CRA) across its product and service portfolio. The role sits within the enterprise security organisation and translates legal interpretations into concrete, auditable processes that span design, development and post‑market phases.

Key responsibilities

• Drive assigned CRA compliance workstreams, ensuring deadlines and internal SLAs are met throughout product lifecycles.
• Coordinate cross‑functional deliverables with Product Security, IT, Legal, Privacy and Supply Chain to eliminate silos and secure stakeholder accountability.
• Architect and maintain defensible CRA documentation, linking regulatory mandates to implemented technical controls.
• Identify, document and quantify CRA‑specific risks, develop treatment plans and escalate material blockers to security leadership.
• Lead audit preparation, evidence collection and serve as the primary operational contact for CRA regulatory inquiries.
• Provide executive telemetry on compliance status and continuous audit readiness.

Required profile

• Proven experience managing regulatory compliance programmes in a technology or hardware environment.
• Strong understanding of EU cybersecurity regulations, particularly the Cyber Resilience Act.
• Ability to work across multiple functions and drive accountability.
• Excellent analytical and risk‑management skills.

Required skills

• Regulatory compliance management.
• Risk assessment and mitigation.
• Documentation and traceability engineering.
• Audit coordination.