Responsibilities
- Lead the Product Security Review Board core team and make pre-release security risk and release decisions across multiple product lines.
- Manage team planning, quarterly OKRs, staffing, priorities, SLAs, quality, delivery, escalation, performance, and talent development.
- Oversee web, cloud-service, API, internet-business, and penetration-testing security programs, including security-left and automated testing.
- Build and operate open-source and software supply-chain security governance, including SCA, SBOM, vulnerability remediation, and license compliance.
- Govern the security of operating systems, networks, cloud platforms, containers, cloud-native environments, and laboratory infrastructure.
- Lead AI security governance and testing for generative AI, large language models, agents, RAG, prompt injection, jailbreaks, data leakage, misuse, authorization, and tool-calling risks.
- Coordinate with product, engineering, testing, operations, legal, compliance, and global security teams to resolve major risks and improve organizational security maturity.
Requirements
- Master's degree or higher in computer science, cybersecurity, information security, software engineering, artificial intelligence, electronic information, communications, or a related field.
- At least 8 years of experience in information security, product security, application security, or AI security.
- At least 3 years of technical team management experience, including management of teams of 10 or more.
- Experience with product security governance, SDL, or DevSecOps in a large technology, internet, or software company.
- Experience managing multiple teams, product lines, or matrixed organizations, plus AI product, AI application, large-language-model, or AI-security projects.
- Strong expertise in web, server-side, API, business-logic, authentication, authorization, penetration, red-team, attack-surface, and complex vulnerability testing.
- Knowledge of security architecture, threat modeling, open-source governance, SCA, SBOM, CVE remediation, DevSecOps, CI/CD security integration, infrastructure security, Docker, Kubernetes, cloud-native security, and Linux and Windows baselines.
- Knowledge of large language models, generative AI, RAG, agents, and common AI application and model security risks.
- Ability to work in English in technical and management meetings and independently produce English emails, technical documents, reports, and presentations.
- Preferred qualifications include CISSP, OSCP, CCSP, CISA, CISM, or CSSLP certification; PSIRT, PSRB, SDL, DevSecOps, software supply-chain, cloud-native, security automation, AI red-team, research, standards, or global-team experience.
Benefits
- Work location is Beijing, China.
Tech Stack
Categories
About Lenovo
Lenovo is a US$83 billion revenue global technology powerhouse, ranked #196 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Guided by its vision of “Smarter Technology for All”, Lenovo is executing a Hybrid AI strategy that spans Personal AI – one personal AI, multiple devices; and Enterprise AI – helping customers turn data into insights and value. This strategy is delivered through the Group’s commitment to world-class innovation and a full-stack AI portfolio, including devices (PCs, workstations, smartphones, tablets, accessories), infrastructure solutions (server, storage, edge, high performance computing and software defined infrastructure), as well as software, solutions, and services. With a global footprint spanning 21 research and development locations in 11 markets, and a global supply chain including more than 30 manufacturing sites across 10 markets, Lenovo is widely recognized for its operational excellence, including ranking #8 in the Gartner Supply Chain Top 25. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY). To find out more visit https://www.lenovo.com, and read about the latest news via our StoryHub at https://news.lenovo.com/. To learn more about our career opportunities, visit our careers page at http://jobs.lenovo.com/.