Manager, AI Governance Programs

Lenovo; North Carolina; On-site; USD 110,000 - 150,000; Full time

Job summary

Lenovo seeks an experienced governance and program management professional for the AI Governance Programs within the Chief AI Office (CAIO). The role focuses on operationalizing security and regulatory requirements across complex technology environments and coordinating with AI Security, Privacy, Legal, and Engineering to align with standards and global regulations.

The candidate will manage CAIO AI risk methodologies, governance processes, and assurance capabilities across the AI lifecycle,

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Risk Management, Audit, Law, Data Privacy, Public Administration, Business, Computer Science, or related field.
• 8+ years of experience in cybersecurity, technology governance, risk management, compliance, audit, third-party risk, security assurance, or related fields.

Responsibilities

• Operationalize AI governance policies, standards and control frameworks across AI platforms and AI-enabled applications.
• Drive strategic initiatives for Responsible AI, including analysis and risk management of AI projects, agentic AI, LLMs and open weights models.
• Partner with AI Security, AI Privacy, AI Legal, Product Security and Engineering teams to ensure AI and security activities are aligned with regulatory and certification requirements.
• Monitor compliance with AI governance requirements and support continuous control monitoring, evidence collection and audit readiness.
• Evaluate emerging AI governance frameworks, industry standards, and regulatory requirements, recommending improvements to Lenovo's AI governance program.
• Develop governance metrics, dashboards, and reporting to measure AI governance maturity, compliance, and operational effectiveness.
• Occasional domestic and international travel (approximately 5–20%) for meetings and collaboration.

Skills

Cybersecurity governance

Regulatory compliance

Education

Bachelor's degree

Job description

We are Lenovo. We do what we say. We own what we do. We WOW our customers.

Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).

This transformation together with Lenovo’s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com, and read about the latest news via our StoryHub.

Summary

This new position joins Lenovo's AI Governance Programs organization within the Chief AI Office (CAIO) in our mission of enabling security and trust in Lenovo's use of AI technology in operations and product development through Responsible AI. The AI Governance Programs organization works across all Lenovo's business and product areas to ensure AI projects and tools are developed and implemented in accordance with Company standards and international regulations.

The candidate should be an experienced governance and program management professional with a strong background in operationalizing security and regulatory requirements across complex technology environments. This role will manage the CAIO AI risk management methodologies, governance processes and assurance capabilities that integrate AI risk management throughout the AI lifecycle. They will collaborate with AI Security, Supply Chain, Legal, Privacy and Ethics so that risks are understood, appropriately managed and transparently reported to CAIO leadership and executive stakeholders.

The candidate should understand the governance and security considerations associated with AI systems and software supply chains, including large language models, agentic AI, third-party AI and security solutions, and emerging regulatory expectations. The ideal candidate can translate AI and security policy, certification, and customer assurance requirements into practical and repeatable operating models, and help demonstrate that Lenovo’s AI systems and products are secure, trustworthy, well-governed, and aligned with internal standards, industry frameworks, and evolving global regulations.

Key Responsibilities

• Operationalize AI governance policies, standards and control frameworks across AI platforms and AI-enabled applications.
• Drive strategic initiatives for Responsible AI, including analysis and risk management of AI projects, agentic AI, LLMs and open weights models
• Partner with AI Security, AI Privacy, AI Legal, Product Security and Engineering teams to ensure AI and security activities are aligned with regulatory and certification requirements.
• Monitor compliance with AI governance requirements and support continuous control monitoring, evidence collection and audit readiness.
• Evaluate emerging AI governance frameworks, industry standards, and regulatory requirements, recommending improvements to Lenovo's AI governance program.
• Develop governance metrics, dashboards, and reporting to measure AI governance maturity, compliance, and operational effectiveness.
• Occasional domestic and international travel (approximately 5–20%) for meetings and collaboration.

Basic Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Risk Management, Audit, Law, Data Privacy, Public Administration, Business, Computer Science, or a related discipline (or equivalent experience).
• 8+ years of experience in cybersecurity, technology governance, risk management, compliance, audit, third-party risk, security assurance, or related fields.

Preferred Qualifications

• Experience leading governance, risk, compliance, security assurance, certification readiness, or technology risk reviews involving complex enterprise technology initiatives.
• Experience working with cross-functional stakeholders including Engineering, Product Management, Security, Legal, Privacy, Compliance, Supply Chain, Third-Party Risk, Enterprise Risk Management
• Preferred experience conducting security or AI use case reviews, risk assessments, control assessments, or customer assurance reviews.
• Deep understanding of Responsible AI frameworks and global AI regulations, including the EU AI Act, ISO/IEC 42001, ISO/IEC 27001, NIST AI RMF, OECD AI Principles, or similar governance and assurance frameworks.
• Good understanding of data protection regulations, including GDPR and privacy-by-design principles, as they apply to AI systems and AI-enabled services.
• Professional certifications such as CISSP, CISM, CRISC, CISA, CDPSE, CTPRP, AAISM, ISO 27001 or ISO/IEC 42001 Lead Implementer/Auditor, AIGP, or similar are preferred.
• Excellent written and verbal communication skills, with the ability to translate technical, regulatory, audit, and assurance topics into clear guidance for technical teams, business leaders, customers, and executives.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.