Manager, Technical Compliance Monitoring & Assurance
About The Position
Lenovo is hiring a Manager, Technical Compliance Monitoring & Assurance to develop and operate technical compliance monitoring capabilities that support national security obligations. The role designs monitoring frameworks for regulated systems, applications, cloud services, and data environments; assesses technical controls; and monitors data protection, system segregation, and access-control requirements. The position provides access governance and data protection assurance by validating controls for Protected Data and regulated environments, reviewing privileged access, assessing identity governance and logical access controls, evaluating segregation between regulated and non-regulated environments, and supporting Security Officer reviews of access controls and logs. The role also establishes repeatable audit-evidence processes, maintains evidence for regulatory certifications and reporting, coordinates evidence collection, and supports independent audits and government reviews. It participates in investigations of compliance deviations and security incidents, supports root cause analysis and corrective actions, assists with incident evidence and documentation, and validates remediation. Additional work includes supporting annual reporting and certification, responding to regulatory inquiries, and monitoring commitments under national security agreements. U.S. citizenship is required. Availability may be needed during security events or compliance deadlines, and travel is limited.
Requirements
- Bachelor's degree or equivalent experience.
- At least 8 years of experience in cybersecurity, security engineering, security operations, information assurance, risk management, compliance monitoring, or related disciplines.
- Experience implementing or assessing technical security controls.
- Experience interpreting regulatory or control requirements and translating them into operational controls.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills.
- U.S. citizenship required.
Nice To Haves
- Experience supporting CFIUS, FOCI mitigation, SSA, Proxy Agreement, NISPOM, FedRAMP, or similar national security programs.
- Experience with Splunk, Microsoft Purview, SailPoint, CyberArk, ServiceNow GRC, Archer, or cloud security platforms.
- Knowledge of NIST CSF 2.0, NIST SP 800-171, NIST SP 800-53, CIS Controls, or data governance frameworks.
Responsibilities
- Develop and operate continuous compliance monitoring capabilities supporting national security obligations.
- Design monitoring frameworks for regulated systems, applications, cloud services, and data environments.
- Assess the effectiveness of technical controls supporting compliance requirements.
- Monitor compliance with data protection, system segregation, and access-control requirements.
- Develop compliance metrics, dashboards, and executive reporting.
- Validate controls protecting Protected Data and regulated environments.
- Review privileged-access management activities.
- Assess logical access controls and identity governance processes.
- Evaluate segregation controls between regulated and non-regulated environments.
- Support Security Officer review activities involving access controls and access-log validation.
- Build repeatable processes for generating audit-ready evidence.
- Maintain evidence supporting regulatory certifications and compliance reporting.
- Coordinate evidence collection activities.
- Support independent audits and government reviews.
- Participate in investigations involving compliance deviations and security incidents.
- Support root cause analysis and corrective-action development.
- Assist in evidence collection and incident documentation.
- Validate remediation effectiveness.
- Support annual reporting and certification activities.
- Assist with responses to regulatory inquiries.
- Support compliance monitoring activities associated with national security agreements and related commitments.
Benefits
- Benefits are available; Lenovo directs candidates to its benefits website for details.
- Individuals may also be considered for bonuses and/or commissions.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
