We are Lenovo. We do what we say. We own what we do. We WOW our customers.

Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world's largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo's continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).

This transformation together with Lenovo's world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com, and read about the latest news via our StoryHub.

Role Summary

The Information Security Officer (ISO) will be responsible for maintaining the security posture of scientific IT endpoints, responding to security incidents, and ensuring compliance with IT security policies and standards. The ISO will work closely with the departments to provide comprehensive support in various security operations.

Key Responsibilities

Perform security patching, hardening, and remediation for End user computing environments such as Windows OS, Mac OS, O365 and other standard desktop software and applications.
Investigate and respond to security incidents and service requests related to end-user computing, including email phishing and analysis, coordinating mitigative measures and preparing official incident reports.
Analyse advisories published by ITSS CERT and/or product manufacturers, perform risk assessments, and execute recommendations.
Provide consultation, evaluation, and implementation of security controls, including cross-border travel evaluations and pre-emptive checks against IT security policies.
Conduct briefings to reinforce cybersecurity hygiene practices, policy updates, and control implementation for new hires and existing staff.
Evaluate and implement security tools, processes, and procedures, provide extended support for security applications, and handle software whitelisting requests.
Responsible for evaluating risk statements based on security measures, providing recommendations on security strategies, assessing compliance with SOPs and guidelines, and conducting vulnerability checks to ensure effective risk mitigation.

Qualifications

Bachelor's degree in information technology, Computer Science, or related field.

Minimum 3 years of hands-on desktop support experience supporting Windows and macOS operating systems.
Experience with end point security related support, such as handling security incidents, email phishing and analysis, mitigative measures and preparing official incident reports.
Professional certifications such as Microsoft certifications, CISSP, CISM, or equivalent is preferred.
Experience in endpoint security, incident response, IT security policy implementation.
Familiarity with industry security standards and compliance requirements.
Strong communication and presentation skills.

#LPS

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.

Information Security Officer (InfoSec)