Cyber Legal Counsel, EU

We are Lenovo. We do what we say. We own what we do. We WOW our customers.
Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).
This transformation together with Lenovo’s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com (https://www.lenovo.com), and read about the latest news via our StoryHub (https://news.lenovo.com/).

The Cyber Legal Counsel will provide substantive legal support for Lenovo’s implementation of, and ongoing operational processes supporting compliance with, the EU Cyber Resilience Act (CRA). The role will focus on legal interpretation, regulatory reporting, interactions with regulators and law enforcement authorities, product classification and other complex CRA matters.

The role will sit within the Global Privacy & Data Protection Legal team and work closely with Security, Product, Regulatory Compliance, Legal and other stakeholders. It will provide practical, business-oriented legal advice and help establish a consistent CRA legal framework across Lenovo’s products and entities.

Key Responsibilities:

- Provide legal advice and sign-off on CRA incident and vulnerability reporting, product classification and other complex CRA matters.
- Monitor developments in CRA legislation, guidance, standards and regulatory practice, updating existing guidance or developing new policies and decision frameworks as needed.
- Support interactions with regulators and law enforcement authorities, including preparing legal assessments, responses and regulatory filings.
- Advise on complex or borderline questions concerning product classification, economic operators and CRA applicability.
- Support regulatory inquiries, complaints and investigations, coordinating responses with relevant internal stakeholders.
- Monitor CRA implementation across relevant business and Legal teams, identifying areas requiring further legal analysis, guidance or remediation.
- Provide legal input into Product Security training, tabletop exercises and other CRA readiness activities.
- Coordinate with external counsel on specialised legal matters and escalate significant legal risks, novel interpretations and high-risk issues to the Lead Senior Counsel, Cybersecurity.

Key Qualifications:

- Law degree and qualification to practise law in the EU/EEA.
- 8+ years’ experience in technology, cybersecurity, product regulation, privacy and/or digital regulation.
- Strong experience advising on EU regulatory requirements and translating complex legal obligations into practical business processes.
- Strong interest in or experience with cybersecurity, software, hardware, connected products or digital technologies.
- Ability to analyse complex regulatory questions and provide clear, commercially focused advice.
- Experience advising senior stakeholders and working across multiple business units and jurisdictions.
- Strong written and verbal communication skills in English.

Preferred Experience:

- Direct experience advising on the CRA, NIS2, product security, cybersecurity, EU product laws or other digital regulatory requirements.
- Experience with product classification, conformity assessment, CE marking, market surveillance, cybersecurity incident and vulnerability reporting, or regulatory interactions and investigations.
- Experience interpreting developing or ambiguous regulatory requirements and working with external counsel on complex matters, ideally within a multinational technology manufacturer or global organisation supporting hardware, software or connected products.

What Lenovo Can Offer You:

- Private Medical Insurance
- Pension Plan
- Life Assurance
- Income Protection
- Cycle to Work
- 23 days holiday, increasing with years of service

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.

AI PROCESSING NOTICE
We use AI-based tools to support some of our processes (e.g. online interviews recordings and transcripts) in order to achieve better efficiency, accuracy and for our documentation purposes. AI can make mistakes, but we always make sure that the outputs are manually reviewed by a human. You can always opt-out or contact us in case of any question.