EU CRA Compliance Manager: Cyber Resilience for Products

Lenovo; Farnborough; Hybrid; GBP 30,000 - 44,000; Full time

Benefits offered by this job

Career development

Performance-based rewards

Hybrid working model (3:2)

Personal days

Additional vacation days

Sick leave compensation

Training and mentoring

Pension contribution

Life insurance

Job summary

Lenovo is seeking a high-agency Manager, CRA Compliance Program to operationalize the EU CRA framework across product and service portfolios. You will bridge regulatory mandates and engineering execution, driving cross-functional work to ensure lifecycle coverage and audit defensibility.

The role requires translating regulatory interpretations into actionable engineering tasks, managing risk, and delivering precise leadership telemetry while meeting strict regulatory deadlines in a hybrid work

Qualifications

• Bachelor’s degree or higher in a relevant field (Cybersecurity, Information Systems, Engineering, Law)
• 7–10 years of experience in cybersecurity, product security, enterprise risk, or regulatory compliance
• Experience applying CRA, NIS2, or ISO/IEC 27001 frameworks to products or services
• Ability to translate regulatory text into concrete engineering tasks and roadmaps
• Excellent written and verbal communication bridging legal, engineering and executive stakeholders

Responsibilities

• Drive EU CRA compliance workstreams across product lifecycles and meet SLAs
• Coordinate across Product Security, IT, Legal, Privacy, and Supply Chain
• Architect and maintain CRA documentation with end-to-end traceability
• Identify CRA risks and propose remediation paths to leadership
• Lead audit readiness, inquiries, and evidence coordination
• Convert complex metrics into actionable leadership briefings

Skills

Cybersecurity

Regulatory compliance

CRA/NIS2

ISO27001

Stakeholder management

Documentation

Education

Bachelor’s degree in Cybersecurity or related

Job description

Lenovo is seeking a high-agency Manager, CRA Compliance Program to operationalize the EU CRA framework across product and service portfolios. You will bridge regulatory mandates and engineering execution, driving cross-functional work to ensure lifecycle coverage and audit defensibility.

The role requires translating regulatory interpretations into actionable engineering tasks, managing risk, and delivering precise leadership telemetry while meeting strict regulatory deadlines in a hybrid work