Manager, Technical Compliance Monitoring & Assurance

We are Lenovo. We do what we say. We own what we do. We WOW our customers.
Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).
This transformation together with Lenovo’s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com (https://www.lenovo.com), and read about the latest news via our StoryHub (https://news.lenovo.com/).

Key Responsibilities

Technical Compliance Monitoring

- Develop and operate continuous compliance monitoring capabilities supporting national security obligations.
- Design monitoring frameworks for regulated systems, applications, cloud services, and data environments.
- Assess effectiveness of technical controls supporting compliance requirements.
- Monitor compliance with data protection, system segregation, and access-control requirements. Develop compliance metrics, dashboards, and executive reporting.

- Access Governance & Data Protection Assurance Validate controls protecting Protected Data and regulated environments.
- Review privileged-access management activities.
- Assess logical access controls and identity governance processes.
- Evaluate segregation controls between regulated and non-regulated environments.
- Support Security Officer review activities involving access controls and access-log validation.

- Evidence Generation & Audit Readiness Build repeatable processes for generating audit-ready evidence.
- Maintain evidence supporting regulatory certifications and compliance reporting.
- Coordinate evidence collection activities.
- Support independent audits and government reviews.

- Incident Investigation Support Participate in investigations involving compliance deviations and security incidents.
- Support root cause analysis and corrective-action development.
- Assist in evidence collection and incident documentation.
- Validate remediation effectiveness.

- Regulatory Support Support annual reporting and certification activities.
- Assist with responses to regulatory inquiries.
- Support compliance monitoring activities associated with national security agreements and related commitments.

Required Qualifications

- Bachelor's degree or equivalent experience.
- 8+ years of experience in cybersecurity, security engineering, security operations, information assurance, risk management, compliance monitoring, or related disciplines.
- Experience implementing or assessing technical security controls.
- Experience interpreting regulatory or control requirements and translating them into operational controls.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills.

Preferred Qualifications

- Experience supporting CFIUS, FOCI mitigation, SSA, Proxy Agreement, NISPOM, FedRAMP, or similar national security programs.
- Experience with: Splunk
- Microsoft Purview
- SailPoint
- CyberArk
- ServiceNow GRC
- Archer
- Cloud security platforms

- Knowledge of: NIST CSF 2.0
- NIST SP 800-171
- NIST SP 800-53
- CIS Controls
- Data governance frameworks

Citizenship Requirement

U.S. citizenship required.

Availability and Travel

May require availability during security events or compliance deadlines. Limited travel.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.

PAY TRANSPARENCY
The anticipated annual compensation range for this position is 127,100–194,925 USD . Final compensation will be based on relevant experience, skills, and business considerations. Individuals may also be considered for bonuses and/or commissions. Lenovo’s various benefits can be found at www.lenovobenefits.com (https://www.lenovobenefits.com/)
In compliance with Colorado’s Equal Pay for Equal Work Act (EPEWA), the expected application deadline for this position is 01-04-2027. This requirement applies to both internal and external candidates.