Summary
This new position joins Lenovo's AI Governance Programs organization within the Chief AI Office (CAIO) in our mission of enabling security and trust in Lenovo's use of AI technology in operations and product development through Responsible AI. The AI Governance Programs organization works across all Lenovo's business and product areas to ensure AI projects and tools are developed and implemented in accordance with Company standards and international regulations.
The candidate should be an experienced governance and program management professional with a strong background in operationalizing security and regulatory requirements across complex technology environments. This role will manage the CAIO AI risk management methodologies, governance processes and assurance capabilities that integrate AI risk management throughout the AI lifecycle. They will collaborate with AI Security, Supply Chain, Legal, Privacy and Ethics so that risks are understood, appropriately managed and transparently reported to CAIO leadership and executive stakeholders.
The candidate should understand the governance and security considerations associated with AI systems and software supply chains, including large language models, agentic AI, third-party AI and security solutions, and emerging regulatory expectations. The ideal candidate can translate AI and security policy, certification, and customer assurance requirements into practical and repeatable operating models, and help demonstrate that Lenovo’s AI systems and products are secure, trustworthy, well-governed, and aligned with internal standards, industry frameworks, and evolving global regulations.
Key Responsibilities:
- Operationalize AI governance policies, standards and control frameworks across AI platforms and AI-enabled applications.
- Drive strategic initiatives for Responsible AI, including analysis and risk management of AI projects, agentic AI, LLMs and open weights models
- Partner with AI Security, AI Privacy, AI Legal, Product Security and Engineering teams to ensure AI and security activities are aligned with regulatory and certification requirements.
- Monitor compliance with AI governance requirements and support continuous control monitoring, evidence collection and audit readiness.
- Evaluate emerging AI governance frameworks, industry standards, and regulatory requirements, recommending improvements to Lenovo's AI governance program.
- Develop governance metrics, dashboards, and reporting to measure AI governance maturity, compliance, and operational effectiveness.
- Occasional domestic and international travel (approximately 5–20%) for meetings and collaboration.
Basic Qualifications:
- Bachelor's degree in Cybersecurity, Information Systems, Risk Management, Audit, Law, Data Privacy, Public Administration, Business, Computer Science, or a related discipline (or equivalent experience).
- 8+ years of experience in cybersecurity, technology governance, risk management, compliance, audit, third-party risk, security assurance, or related fields.
Preferred Qualifications:
- Experience leading governance, risk, compliance, security assurance, certification readiness, or technology risk reviews involving complex enterprise technology initiatives.
- Experience working with cross-functional stakeholders including Engineering, Product Management, Security, Legal, Privacy, Compliance, Supply Chain, Third-Party Risk, Enterprise Risk Management
- Preferred experience conducting security or AI use case reviews, risk assessments, control assessments, or customer assurance reviews.
- Deep understanding of Responsible AI frameworks and global AI regulations, including the EU AI Act, ISO/IEC 42001, ISO/IEC 27001, NIST AI RMF, OECD AI Principles, or similar governance and assurance frameworks.
- Good understanding of data protection regulations, including GDPR and privacy-by-design principles, as they apply to AI systems and AI-enabled services.
- Professional certifications such as CISSP, CISM, CRISC, CISA, CDPSE, CTPRP, AAISM, ISO 27001 or ISO/IEC 42001 Lead Implementer/Auditor, AIGP, or similar are preferred.
- Excellent written and verbal communication skills, with the ability to translate technical, regulatory, audit, and assurance topics into clear guidance for technical teams, business leaders, customers, and executives.
