Senior Technical Compliance Monitoring Lead

Lenovo Inc.; North Carolina; On-site; USD 120,000 - 180,000; Full time

Job summary

Lenovo in the United States (North Carolina) seeks an experienced cybersecurity professional to lead regulatory compliance monitoring and security controls assessment. You will design frameworks, validate access governance, and coordinate audit-ready evidence for national security obligations.

Responsibilities include incident investigation support, reporting to leadership, and supporting regulatory inquiries. U.S. citizenship is required, with potential limited travel.

Qualifications

• Bachelor's degree or equivalent experience.
• 8+ years of cybersecurity, security engineering, security operations, information assurance, risk management, compliance monitoring, or related disciplines.
• Experience implementing or assessing technical security controls.
• Experience interpreting regulatory or control requirements and translating them into operational controls.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.

Responsibilities

• Develop continuous compliance monitoring capabilities for national security obligations.
• Design monitoring frameworks for regulated systems, applications, cloud services, and data environments.
• Assess effectiveness of technical controls supporting compliance requirements.
• Monitor compliance with data protection, system segregation, and access-control requirements.
• Develop compliance metrics, dashboards, and executive reporting.
• Access Governance Data Protection Assurance
• Validate controls protecting Protected Data and regulated environments.
• Review privileged-access management activities.
• Assess logical access controls and identity governance processes.
• Evaluate segregation controls between regulated and non-regulated environments.
• Support Security Officer review activities involving access controls and access-log validation.
• Evidence Generation Audit Readiness
• Build repeatable processes for generating audit-ready evidence.
• Maintain evidence supporting regulatory certifications and compliance reporting.
• Coordinate evidence collection activities.
• Support independent audits and government reviews.
• Incident Investigation Support
• Participate in investigations involving compliance deviations and security incidents.
• Support root cause analysis and corrective-action development.
• Assist in evidence collection and incident documentation.
• Validate remediation effectiveness.
• Regulatory Support
• Support annual reporting and certification activities.
• Assist with responses to regulatory inquiries.
• Support compliance monitoring activities associated with national security agreements and related commitments.

Skills

Analytical thinking

Communication skills

Education

Bachelor's degree or equivalent experience

Tools

Splunk

Microsoft Purview

SailPoint

CyberArk

ServiceNow GRC

Archer

Cloud security platforms

Job description

Lenovo in the United States (North Carolina) seeks an experienced cybersecurity professional to lead regulatory compliance monitoring and security controls assessment. You will design frameworks, validate access governance, and coordinate audit-ready evidence for national security obligations.

Responsibilities include incident investigation support, reporting to leadership, and supporting regulatory inquiries. U.S. citizenship is required, with potential limited travel.