Cyber Legal Program Manager

Why Work at Lenovo

We are Lenovo. We do what we say. We own what we do. We WOW our customers.

Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).

This transformation together with Lenovo’s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com, and read about the latest news via our StoryHub.

Description and Requirements

The Cyber Legal Programme Manager will coordinate the processes required for Lenovo’s global implementation of the EU Cyber Resilience Act (CRA), with a primary focus on end-to-end legal reporting and regulatory filings arising from CRA vulnerability reporting and incident obligations.

Working within the Global Privacy & Data Protection Legal team and closely with Security, Regulatory Compliance, other Legal teams and relevant stakeholders, the role will ensure that CRA reporting processes are operational, consistently applied and completed within regulatory deadlines across Lenovo Group and Motorola Mobility.

This highly cross-functional role requires strong programme management skills and a good understanding of cybersecurity regulatory requirements and legal processes. Deep substantive legal expertise is not required.

Key Responsibilities: 

• Coordinate the day-to-day CRA Legal workstream and end-to-end reporting workflows under the direction of the Lead Senior Counsel, Cybersecurity.
• Track regulatory deadlines, legal reviews, approvals, filings, follow-up actions and outstanding issues, escalating risks or delays as needed.
• Coordinate inputs from Legal, Security, Regulatory Compliance, Product Security, Engineering and relevant business units to support timely legal assessments and regulatory filings.
• Maintain CRA reporting procedures, playbooks, templates, trackers, evidence and supporting documentation.
• Support the implementation, testing and readiness of CRA escalation and reporting processes, including tabletop exercises.
• Coordinate regulatory inquiries, authority requests and follow-up actions across internal stakeholders.
• Support external counsel engagement, including matter coordination, timelines, deliverables and budget tracking.
• Prepare regular status updates and reporting materials for the Lead Senior Counsel and relevant Legal stakeholders.

Key Requirements: 

• Extensive background in legal, compliance, risk, cybersecurity or technology environments.
• At least 8 years of programme or project management experience within a legal, regulatory, cybersecurity or technology environment.
• Experience coordinating complex, cross-functional regulatory or compliance programmes, preferably within a multinational technology, hardware, software or product-driven organisation.
• Working knowledge of cybersecurity and product-security regulatory requirements, with experience in the EU Cyber Resilience Act (CRA), NIS2 or similar EU digital regulations strongly preferred.
• Strong understanding of legal review, approval and regulatory reporting processes, including time-sensitive workflows, escalations and supporting documentation.
• Ability to manage multiple workstreams and stakeholders against tight, legally mandated deadlines, with strong organisational, communication and stakeholder-management skills.
• Ability to work effectively across Legal, Product Security, Engineering, Security Operations and business teams, with strong written and spoken English.
• A law degree is an advantage; familiarity with cybersecurity incident response, vulnerability management, process governance and regulatory readiness is also beneficial.
  

What Lenovo Can Offer You:

• Opportunities for career development and growth.
• Performance-based rewards.
• Hybrid working model (office 3 days/home office 2 days a week).
• Up to three paid Personal Days annually, plus additional vacation days.
• 100% sick leave compensation for up to two months per year.
• A broad selection of soft and hard skills training, plus individual mentoring.
• Employer contribution to the Third Pillar Pension System, and life and life-events insurance fully covered by the company.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.

PAY TRANSPARENCY

The anticipated initial gross base salary range for this position is 32,900–48,180 EUR per year. This range applies to the primary job location Slovakia and is determined using objective, non-discriminatory and gender-neutral criteria, including skills and relevant experience. Final compensation will be based on relevant experience, skills, and business considerations.

Individuals may also be eligible for variable compensation (such as bonus or commission), depending on the role. The applicable variable pay model, eligibility, and target levels will be discussed during the recruitment process.

In addition to base salary and any applicable variable compensation, Lenovo provides statutory remuneration components required by local law, as well as Lenovo's comprehensive benefits package supporting employee well-being, development, and equal opportunities.

For roles open across multiple countries, local base salary ranges may vary based on market conditions, internal frameworks, and legal requirements. The relevant local range will be transparently communicated during the initial discussions.

AI PROCESSING NOTICE

We use AI-based tools to support some of our processes (e.g. online interviews recordings and transcripts) in order to achieve better efficiency, accuracy and for our documentation purposes. AI can make mistakes, but we always make sure that the outputs are manually reviewed by a human. You can always opt-out or contact us in case of any question.