Senior Enterprise PSIRT & CRA Readiness Lead

Lenovo; North Carolina; On-site; USD 140,000 - 190,000; Full time

Job summary

Lenovo in the United States seeks a Sr. Enterprise Product Security Incident Response Program Manager to lead Lenovo's Global Enterprise PSIRT, coordinating vulnerability intake, triage, disclosure, and CRA readiness across all business groups.

You will establish central governance, drive risk-based remediation, manage communications with researchers and suppliers, and oversee tooling and processes to scale incident response and regulatory compliance.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Systems Engineering, or a related technical discipline preferred
• 10+ years of experience in cybersecurity, product security, incident response, threat intelligence, or program management

Responsibilities

• Establish and manage Lenovo's Global Enterprise Product Security Governance framework
• Coordinate enterprise-wide vulnerability response activities across security and engineering teams
• Lead CRA readiness including tabletop exercises and regulatory reporting
• Publish and maintain customer-facing security advisories and coordinate with suppliers and researchers

Job description

Lenovo in the United States seeks a Sr. Enterprise Product Security Incident Response Program Manager to lead Lenovo's Global Enterprise PSIRT, coordinating vulnerability intake, triage, disclosure, and CRA readiness across all business groups.

You will establish central governance, drive risk-based remediation, manage communications with researchers and suppliers, and oversee tooling and processes to scale incident response and regulatory compliance.