Lenovo

Security Risk & Compliance Manager

Description and Requirements

What You’ll Do:

You’ll be a key member of the Trusted Supplier Program and manage activities related to supply chain security. You will work with Procurement Sourcing Professionals, product development teams and software teams across Lenovo to identify candidates for the Program and to work directly with suppliers around the world as they complete the Program requirements to be included in the Lenovo Trusted Supplier List.

Responsibilities include, but are not limited to the following:

• Onboarding suppliers as candidates for the Trusted Supplier Program
• Technical assessment of suppliers’ security processes
• Negotiating security contracts with suppliers
• Supporting the Trusted Supplier Auditors as they audit suppliers
• Maintaining data to track Program activities for all suppliers
• Publication of weekly and monthly reports, including the Trusted Supplier List
• Presentation of Program status
• Working with the Trusted Supplier Program Manager on continued improvement of the Program execution tools and processes
• Project work related to supply chain security improvement activities, as needed

Position Requirements

• Strong organizational skills with attention to detail and ability to multi-task.
• Strong sense of task ownership, and persistence to execute processes from beginning to end.
• Familiarity with cybersecurity threats, countermeasures, and issues.
• Some understanding of security practices as they relate to product security and development.
• Program Management or Project Management in a technical environment.
• Ability to successfully work across regions and functions to solve problems and get things done.
• Experience working with outside agencies such as Suppliers or Customers.
• Strong skills with MS Excel, MS PowerPoint and other Office tools for data management.

What you'll need

• Operational experience of managing cyber security and risk within fast-paced technology environments
• Knowledge of security compliance across differing technology solutions, contracts and industries
• Organizational management skills with a track record of delivering GRC projects under tight deadlines
• Experience of security audits and conducting consulting engagements
• Knowledge and experience of ISO27001, NIST, CIS and other similar standards/frameworks
• The ability to create, develop and maintain security policies and practices
• A good working level of technical knowledge of architectural techniques to prevent, mitigate and manage security threat
• Experience of security tools and technology
• Excellent communications skills and stakeholder management experience
• Ability to think of long-term strategic solutions as well as immediate resolutions to problems
• Excellent problem solving, critical thinking, analytical and decision making skills