General InformationReq # WD00107198
Career area: Information Technology
Country/Region: United States of America
State: North Carolina
City: Morrisville
Date: Wednesday, October 28, 2026
Working time: Full-time
Additional Locations:
* United States of America - North Carolina - Morrisville
Description and RequirementsKey ResponsibilitiesTechnical Compliance Monitoring
- Develop and operate continuous compliance monitoring capabilities supporting national security obligations.
- Design monitoring frameworks for regulated systems, applications, cloud services, and data environments.
- Assess effectiveness of technical controls supporting compliance requirements.
- Monitor compliance with data protection, system segregation, and access-control requirements.
- Develop compliance metrics, dashboards, and executive reporting.
- Access Governance & Data Protection Assurance
- Validate controls protecting Protected Data and regulated environments.
- Review privileged-access management activities.
- Assess logical access controls and identity governance processes.
- Evaluate segregation controls between regulated and non-regulated environments.
- Support Security Officer review activities involving access controls and access-log validation.
- Evidence Generation & Audit Readiness
- Build repeatable processes for generating audit-ready evidence.
- Maintain evidence supporting regulatory certifications and compliance reporting.
- Coordinate evidence collection activities.
- Support independent audits and government reviews.
- Incident Investigation Support
- Participate in investigations involving compliance deviations and security incidents.
- Support root cause analysis and corrective-action development.
- Assist in evidence collection and incident documentation.
- Validate remediation effectiveness.
- Regulatory Support
- Support annual reporting and certification activities.
- Assist with responses to regulatory inquiries.
- Support compliance monitoring activities associated with national security agreements and related commitments.
Required Qualifications- Bachelor's degree or equivalent experience.
- 8+ years of experience in cybersecurity, security engineering, security operations, information assurance, risk management, compliance monitoring, or related disciplines.
- Experience implementing or assessing technical security controls.
- Experience interpreting regulatory or control requirements and translating them into operational controls.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills.
Preferred Qualifications- Experience supporting CFIUS, FOCI mitigation, SSA, Proxy Agreement, NISPOM, FedRAMP, or similar national security programs.
- Experience with:
- Splunk
- Microsoft Purview
- SailPoint
- CyberArk
- ServiceNow GRC
- Archer
- Cloud security platforms
- Knowledge of:
- NIST CSF 2.0
- NIST SP 800-171
- NIST SP 800-53
- CIS Controls
- Data governance frameworks
Citizenship RequirementU.S. citizenship required.
Availability and TravelMay require availability during security events or compliance deadlines. Limited travel.
Additional Locations:
* United States of America - North Carolina - Morrisville
PAY TRANSPARENCYThe anticipated annual compensation range for this position is
127,100-194,925 USD. Final compensation will be based on relevant experience, skills, and business considerations. Individuals may also be considered for bonuses and/or commissions. Lenovo's various benefits can be found at www.lenovobenefits.com
In compliance with Colorado's Equal Pay for Equal Work Act (EPEWA), the expected application deadline for this position is 01-04-2027. This requirement applies to both internal and external candidates.
