CRA Compliance Lead: Cyber Risk & Audit Readiness

Lenovo; Warszawa; Hybrid; PLN 152,000 - 222,000; Full time

Benefits offered by this job

Hybrid working model (3:2)

Personal days

Vacation days

Sick leave compensation

Job summary

Lenovo is seeking a high-agency Manager, CRA Compliance Program to operationalize the EU Cyber Resilience Act framework across product and service portfolios. You will translate regulatory interpretations into actionable engineering tasks, drive cross-functional execution, and ensure audit-ready processes within the enterprise security organization.

Requirements include 7–10 years in cyber compliance, and a track record with CRA or major enterprise frameworks.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Systems Engineering, Law, or a related field.
• Experience in cybersecurity, product security, enterprise risk, or regulatory compliance roles (7–10 years).
• Proven ability to translate regulatory text into actionable engineering tasks.
• Experience with CRA, NIS2, ISO/IEC 27001 or similar frameworks.
• Excellent written and verbal communication, bridging legal, engineering, and executive stakeholders.

Responsibilities

• Drive EU CRA compliance workstreams across product lifecycles and meet SLA deadlines.
• Coordinate with Product Security, IT, Legal, Privacy, and Supply Chain to align compliance deliverables.
• Architect and maintain CRA documentation and ensure end-to-end traceability.
• Identify CRA-specific risks and develop remediation plans.
• Lead audit preparation and act as primary CRA inquiries contact; ensure continuous audit readiness.
• Synthesize compliance metrics into leadership briefings.

Skills

Regulatory compliance

Cross-functional collaboration

Regulatory interpretation

Communications

Education

Bachelor’s degree in Cybersecurity or related field

Tools

Documentation management

Job description

Lenovo is seeking a high-agency Manager, CRA Compliance Program to operationalize the EU Cyber Resilience Act framework across product and service portfolios. You will translate regulatory interpretations into actionable engineering tasks, drive cross-functional execution, and ensure audit-ready processes within the enterprise security organization.

Requirements include 7–10 years in cyber compliance, and a track record with CRA or major enterprise frameworks.