Enterprise PSIRT Lead — Security Incident Response & CRA

Lenovo; Morrisville (NC); On-site; USD 161,000 - 246,000; Full time

Job summary

Lenovo is seeking a Senior Enterprise Product Security Incident Response Program Manager to lead the Global Enterprise PSIRT and coordinate enterprise-wide vulnerability response. You will establish a central coordination team for vulnerability intake, triage, disclosure, and CRA reporting across Lenovo’s business groups.

The role demands hands-on technical leadership, orchestration across security and engineering teams, and strong communication with legal, product, and executive stakeholders.

Qualifications

• 10+ years of experience in cybersecurity, product security, incident response, threat intelligence, or related program management.
• Proven capability in establishing and leading a technical cybersecurity program.
• Excellent written and verbal communication, bridging legal, engineering, and executive stakeholders.

Responsibilities

• Lead Lenovo's Global Enterprise PSIRT and coordinate enterprise-wide vulnerability response.
• Establish central intake, triage, disclosure, and CRA reporting processes across business units.
• Oversee CRA readiness and governance, including ENISA workflows and regulatory evidence retention.
• Publish timely security advisories and coordinate with researchers, suppliers, and engineering teams.

Skills

Cybersecurity expertise

Incident response

Threat intelligence

Program management

Leadership

Education

Bachelor's degree in Cybersecurity

Tools

PSIRT tooling

Job description

Lenovo is seeking a Senior Enterprise Product Security Incident Response Program Manager to lead the Global Enterprise PSIRT and coordinate enterprise-wide vulnerability response. You will establish a central coordination team for vulnerability intake, triage, disclosure, and CRA reporting across Lenovo’s business groups.

The role demands hands-on technical leadership, orchestration across security and engineering teams, and strong communication with legal, product, and executive stakeholders.