Sr. Manager, Cyber Resilience Act Compliance

Lenovo - North Carolina, United States

Hiring: Sr. Manager, Cyber Resilience Act Compliance Company: Lenovo Location: North Carolina, United States Job Posted Time: 2026-09-12 07:41:00 Target Skills & Keywords : Regulatory Compliance About the job Experience: •12+ years of experience in cybersecurity, compliance, risk, product security, assurance, or related disciplines. Required Skills: •The Senior Manager, CRA Compliance Program serves as the enterprise execution lead for the EU Cyber Resilience Act (CRA) compliance program across in‑scope products, services, and supporting systems. EU CRA is a priority regulatory program with defined timelines, regulatory obligations, and audit expectations. •This role owns delivery execution, operating rhythm, and people leadership for the compliance and certifications function, ensuring consistent execution, prioritization, and quality across the portfolio. •Compliance Portfolio Leadership Program Execution •EU Cyber Resilience Act is a priority regulatory program with defined delivery timelines and regulatory obligations that must be met across the portfolio. •Lead execution of a portfolio of security compliance and certification initiatives, ensuring delivery against regulatory, certification, and customer requirements. •Accountable for execution delivery across the compliance portfolio. Regulatory interpretation and final compliance positions are owned by designated central GRC, Legal, or Security leadership. •Define execution strategies, operating models, and delivery plans for supported compliance programs. •Maintain oversight of scope, timelines, dependencies, and milestones across the portfolio. Qualifications: •Bachelor’s degree in cybersecurity, information systems, engineering, law, or a related field required. •Demonstrated experience leading audits, certifications, or regulatory compliance initiatives. •Professional certifications such as CISSP, CISM, CISA, PMP, or ISO/IEC 27001 Lead Implementer strongly preferred. •Availability to support audit, certification, or regulatory activities during business hours, with occasional off‑hours engagement. •Occasional travel may be required for audits, assessments, or executive stakeholder engagements. •In compliance with Colorado's EPEWA, the expected application deadline for this position is August 27, 2026. This applies to both external and internal candidates. Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!