Technical Project Manager

Why Work at Lenovo

We are Lenovo. We do what we say. We own what we do. We WOW our customers.

Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).

This transformation together with Lenovo’s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com, and read about the latest news via our StoryHub.

Description and Requirements

We are seeking an experienced Technical Project Manager to lead security compliance initiatives across our firmware development organization. This role will drive the planning, execution, and governance of security-related programs that ensure our products meet internal security requirements and external regulatory obligations.

The ideal candidate will serve as the central coordinator between firmware engineering, product security, legal, open-source governance, quality, and product management teams. Key focus areas include Product Security Incident Response Team (PSIRT) engagements, Common Vulnerabilities and Exposures (CVE) management, open-source software compliance, Software Bill of Materials (SBOM) readiness, and compliance with emerging cybersecurity regulations including the European Union Cyber Resilience Act (EU CRA).

This position requires strong program management skills, technical credibility with firmware engineering teams, and the ability to drive complex cross-functional initiatives from requirements through execution.

Key Responsibilities:

• Drive security compliance initiatives across firmware development teams throughout the product lifecycle.  

• Establish, track, and communicate compliance milestones, dependencies, risks, and deliverables.  

• Partner with engineering leaders to integrate security and compliance requirements into development processes.  

• Lead firmware organization readiness efforts for EU Cyber Resilience Act (CRA) requirements.  

• Translate regulatory requirements into actionable engineering plans and deliverables.  

• Develop program dashboards and executive-level reporting on compliance readiness and security posture.  

• Lead cross-functional reviews to assess compliance gaps and drive remediation plans. 

• Coordinate firmware team participation in PSIRT investigations and customer-facing security response activities.  

• Drive timely analysis, prioritization, remediation, validation, and closure of security vulnerabilities.  

• Track and manage CVE remediation activities across multiple firmware programs.  

• Facilitate communication between engineering, security, support, and product teams during vulnerability response efforts. 

• Develop and maintain comprehensive program plans, schedules, key milestones, dependencies, and success metrics. 

• Drive execution of program plans to ensure timely delivery of commitments and business objectives. 

• Identify, assess, track, and mitigate program risks, issues, and blockers to ensure predictable execution. 

• Provide clear, accurate, and timely status updates to engineering teams, stakeholders, and executive leadership. 

• Partner with engineering leads to decompose complex technical problems into actionable workstreams and deliverables. 

• Facilitate Agile ceremonies, including daily stand-ups, sprint planning, sprint reviews, retrospectives, and steering committee meetings. 

• Coordinate and align engineering, product management, QA, release management, support, and other cross-functional teams. 

• Drive cross-functional collaboration to resolve software defects, implement feature enhancements, and achieve program goals. 

• Ensure effective communication and coordination across geographically distributed teams. 

Basic Qualifications:

• Bachelor's degree in Computer Science, Engineering, Information Systems, or a related technical field, or equivalent practical experience. 

• 8+ years of experience in Technical Program Management, Project Management, People Management or related leadership roles within software, hardware, firmware, embedded systems, or enterprise IT environments. 

• Proven experience managing multiple concurrent projects while balancing competing priorities and deadlines. 

• Strong technical aptitude with the ability to understand technical specifications, software/firmware development lifecycles, system architectures, and engineering tradeoffs. 

• Expertise in Jira, including workflow customization, dashboards, reporting, filters, and Confluence integration. 

• Demonstrated ability to influence stakeholders and drive alignment across cross-functional teams. 

• Experience leading collaboration across global engineering teams, external vendors, and business partners. 

Preferred Qualifications:

• Experience working with Product Security Incident Response Teams (PSIRT).  

• Familiarity with firmware security practices, secure development lifecycle (SDL), and secure coding initiatives.  

• Knowledge of software supply chain security concepts, SBOMs, and software composition analysis tools.  

•  Experience with server and platform firmware technologies, including BMC/OpenBMC, IPMI, UEFI, and related ecosystem components. 

• Knowledge of open-source software governance, compliance processes, and PSIRT (Product Security Incident Response Team) practices. 

• Familiarity with scripting and automation tools such as Python, Bash, or PowerShell. 

• Experience with DevOps practices, CI/CD pipelines, release management, and software quality processes. 

• PMP, PgMP, Scrum Master, SAFe, or other project/program management certifications are preferred, but not required. 

• Experience working in enterprise-scale hardware-software integrated product development environments. 

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.