Manager, AI Governance and Security

This new position joins Lenovo's AI Risk Management organization within the Chief AI Office in our mission of enabling security and trust in Lenovo's use of AI technology in product development through Responsible AI. The AI Risk Management organization works across all Lenovo's business and product areas to ensure AI tools are used in accordance with Company standards and international regulations and products are developed and implemented with industry best practices for security.

The candidate should be a technology professional with experience implementing governance processes, operational controls and risk-based practices across enterprise technology and cloud environments. They bring a collaborative, operational mindset and work effectively with engineering, security, legal, privacy and business teams to strengthen Trust & Safety capabilities across Lenovo's AI ecosystem.

They should have a strong understanding of AI technologies, including Large Language Models (LLMs), and emerging AI security, governance and regulatory considerations. The ideal candidate can translate policy and governance requirements into practical operational processes, support AI risk assessments, and help ensure compliance with internal standards and evolving regulatory requirements. A passion for AI, technology, and responsible innovation is essential, with a strong belief that trustworthy AI is built through effective governance and cross-functional collaboration.

Key Responsibilities

• Operationalize AI governance policies, standards and control frameworks across AI platforms and AI-enabled applications.
• Drive AI risk assessments, security reviews and governance activities throughout the AI development lifecycle.
• Coordinate AI governance processes, including model inventories, risk registers, control assessments and approval workflows.
• Partner with AI Security, AI Privacy, AI Legal, Product Security and Engineering teams to ensure compliance with Lenovo policies and applicable AI regulations.
• Develop and maintain governance documentation, operational procedures, playbooks, and reporting supporting the AI Trust and Safety Operations Center.
• Monitor compliance with AI governance requirements and support continuous control monitoring, evidence collection and audit readiness.
• Support the investigation, assessment, and coordination of AI-related security, compliance, and Trust & Safety incidents.
• Evaluate emerging AI governance frameworks, industry standards, and regulatory requirements, recommending improvements to Lenovo's AI governance program.
• Develop governance metrics, dashboards, and reporting to measure AI governance maturity, compliance, and operational effectiveness.
• Help build awareness of AI security through engaging training content and internal communications.
• Occasional domestic and international travel (approximately 5–20%) for meetings and collaboration.

Qualifications

• Experience leading security, privacy, compliance, or technology risk reviews involving complex technology initiatives.
• Experience working with cross-functional stakeholders including Engineering, Product Management, Security, Legal, Privacy, Compliance, and business leadership.
• Experience conducting AI use case reviews, Responsible AI assessments or AI risk assessments
• Good understanding of Responsible AI frameworks and global AI regulations, including the EU AI Act, ISO/IEC 42001, ISO/IEC 27001, NIST AI RMF, OECD AI Principles, or similar governance frameworks.
• Good understanding of data protection regulations, including GDPR and privacy-by-design principles.
• Knowledge of AI security frameworks and guidance such as OWASP Top 10 for LLM Applications, MITRE ATLAS, SAIF.
• Professional certifications such as CISSP, CISM, CRISC, AAISM,  ISO 27001 or 42001 Lead Implementer/Auditor, AIGP or similar are advantageous.
• Excellent written and verbal communication skills, with the ability to communicate complex technical and regulatory topics to both technical and executive audiences.
• Experience working in a global technology organization supporting cross-functional governance programs.

Basic Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Law, Data Privacy, Public Policy, Risk Management, or a related discipline (or equivalent experience).
• 8+ years of experience in IT, cybersecurity, technology governance, risk management, compliance or related fields