Cybersecurity Compliance Advisor

Cybersecurity Compliance Advisor Overview

Lenovo is seeking a highly experienced Cybersecurity Compliance Advisor to join their Solutions & Services Group (SSG). This role offers an exciting opportunity to work with global product teams to ensure Lenovo’s business units meet various regional, national, and international cybersecurity standards and regulations. The successful candidate will collaborate with some of the industry’s top security professionals to assess risks, develop compliance strategies, and implement risk mitigation measures.

The primary focus of this position is to lead compliance readiness efforts for the NIS2 Directive and Cyber Resilience Act (CRA). Responsibilities include conducting gap assessments, identifying risks, and translating findings into actionable remediation plans. You will work closely with engineering and product teams to embed CRA requirements into the product development lifecycle, emphasizing secure-by-design principles, vulnerability management, Software Bill of Materials (SBOMs), and incident reporting processes.

You will oversee the deployment of cybersecurity controls and risk management strategies to ensure compliance with governance, accountability, supply chain security, and operational resilience standards. Managing compliance projects from start to finish, you will define timelines, milestones, and deliverables, while proactively tracking progress, dependencies, and potential obstacles.

As the main liaison within the SSG, you will coordinate efforts across security, legal, engineering, product management, procurement, and leadership teams to drive compliance initiatives related to NIS2 and CRA. Developing and maintaining comprehensive compliance documentationâ??including policies, procedures, control matrices, evidence repositories, audit trails, and supporting recordsâ??is essential for demonstrating regulatory adherence.

You will support internal and external audits, assessments, and regulatory inquiries by ensuring the organization is prepared and compliant. Additionally, you will monitor changes in cybersecurity legislation and standards, providing metrics, reports, and insights to measure program maturity and inform leadership of compliance status.

Ideal candidates will have over seven years of experience in cybersecurity compliance, governance, or risk management, with strong knowledge of EU cybersecurity regulations such as NIS2 and CRA, or related frameworks like GDPR, DORA, and ISO 27001. Proven experience in developing or maturing compliance programs, excellent project management skills, and the ability to influence cross-functional teams are essential. Effective communication skills are required to translate complex technical and regulatory language into clear guidance for diverse audiences.

Applicants should hold a bachelorâ??s degree in Cybersecurity, Information Systems, Law, Computer Science, or a related field, or have equivalent practical experience. Professional certifications such as CISSP, CISM, CISA, or CRISC are preferred. Experience within technology companies, managed service providers, or organizations operating under CRA regulations will be advantageous.

Lenovo offers a diverse and inclusive work environment, emphasizing gender diversity, with benefits including Employee Assistance Programs, sustainability initiatives, training opportunities, and mentorship programs. The role is based primarily in Hampshire, UK, with additional locations in Romania and Slovakia. The salary range for candidates in Slovakia is approximately â?¬37,800 to â?¬50,400 gross annually, with final compensation based on experience and skills. Lenovo is committed to equal opportunity employment and does not discriminate based on race, gender, age, religion, sexual orientation, or other protected characteristics.

Note that this role does not specify any visa sponsorship or work permit support. The company states that salary transparency and variable compensation details will be shared during the recruitment process, and that AI tools are used in some processes with human oversight.

Degree Requirement: Not Specified

Visa Sponsorship May be