What You Will Do

• Lead NIS2 CRA compliance readiness by conducting gap assessments, identifying risks, and translating findings into clear, prioritized remediation plans.
• Partner with engineering and product teams to embed Cyber Resilience Act (CRA) requirements into the product lifecycle, including secure-by-design principles, vulnerability management, SBOMs, and incident reporting processes.
• Drive implementation of cybersecurity and risk management controls, ensuring compliance with regulatory requirements related to governance, accountability, supply chain security, and operational resilience.
• Manage compliance programs and projects end-to-end, defining timelines, milestones, and deliverables while proactively tracking progress, risks, dependencies, and blockers.
• Act as the primary liaison across SSG, collaborating with security, legal, engineering, product, procurement, and leadership teams on NIS2 and CRA compliance initiatives.
• Develop and maintain compliance frameworks and documentation, including policies, procedures, control matrices, evidence repositories, audit trails, and supporting records.
• Support internal and external audits, assessments, and regulatory engagements, ensuring the organization is prepared for compliance reviews and regulator inquiries.
• Monitor evolving cybersecurity regulations and industry standards, including ENISA guidance and harmonized standards, while delivering metrics, reporting, and insights that measure program maturity and communicate compliance status to leadership.

What You Will Need

• 7+ years of experience in cybersecurity compliance, governance, risk compliance (GRC), IT/cyber risk management, or a related regulatory compliance function.
• Strong knowledge of EU cybersecurity regulations, including NIS2 and the Cyber Resilience Act (CRA), or experience with frameworks such as GDPR, DORA, and ISO 27001 with the ability to quickly build expertise in emerging regulations.
• Proven experience developing, implementing, or maturing compliance programs, helping organizations strengthen governance, controls, and regulatory readiness.
• Excellent project management skills, with the ability to independently lead multiple initiatives, manage competing priorities, and coordinate complex cross-functional workstreams.
• Strong stakeholder management and influencing capabilities, comfortable partnering with engineering, product, legal, procurement, security, and executive leadership teams to drive alignment and execution.
• Exceptional communication skills, with the ability to translate complex technical, cybersecurity, and regulatory requirements into clear, practical guidance for both technical and non-technical audiences.
• Bachelor’s degree in Cybersecurity, Information Systems, Law, Computer Science, or a related field, or equivalent combination of education and practical experience.
• Professional certifications such as CISSP, CISM, CISA, CRISC, or similar are preferred, along with cybersecurity experience within a technology company, managed services provider (MSP), or connected-product organization operating under Cyber Resilience Act requirements.

What We Offer

• An international team with a high focus on Gender Diversity.
• Employee Assistance Program, e.g., for psychological, legal financial consultancy.
• You are joining a company that prioritizes sustainable solutions like CO2 Offset, Asset Recovery Services, and the Lenovo Certified Refurbished portfolio.
• Access to training for personal development - Internal E-learning Development Platform Available for Employees
• Mentorship program.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.