Privacy and Cybersecurity Counsel - Europe and META

The Privacy and Cybersecurity Counsel will provide legal support on cybersecurity and privacy matters across the EU and globally. The role will advise business, security, product and Legal stakeholders and translate privacy and cybersecurity

into practical guidance and processes. The role is part of Lenovo’s Global Privacy & Data Protection Legal team and reports to the Lead Senior Counsel, Cybersecurity, working closely with cybersecurity, product-security, business-unit counsel and other Legal stakeholders. Key Responsibilities Advise business, security, product and Legal stakeholders on cybersecurity laws and emerging requirements, including NIS2, the EU Cyber Resilience Act, DORA and related global frameworks. Monitor privacy and cybersecurity legislation, regulatory guidance, standards and enforcement trends, assessing their impact on Lenovo. Translate legal requirements into practical guidance, processes, decision frameworks and training for business and security teams. Support the development and enhancement of privacy and cybersecurity standards, procedures and processes as requirements evolve. Provide legal support for privacy and security incidents, cyber investigations and crisis response, including legal assessments and regulatory considerations. Conduct privacy reviews of projects and products, identifying legal requirements and providing practical recommendations. Draft and negotiate cybersecurity and privacy provisions in customer, supplier and other commercial agreements. Support customer engagements, audits, due diligence, RFPs and regulatory inquiries relating to privacy and cybersecurity. Work with external counsel and internal subject-matter teams on complex or specialised legal and regulatory matters. Qualifications & requirements Law degree and qualification to practise law in a relevant jurisdiction, with experience in privacy, cybersecurity, technology or regulatory legal matters, preferably in a multinational technology company. Strong understanding of EU privacy and cybersecurity frameworks, with experience or exposure to NIS2, the Cyber Resilience Act, DORA or other EU cybersecurity legislation. Experience advising cross-functional stakeholders, including security, product and business teams, and explaining complex legal requirements clearly to non-legal audiences. Strong legal drafting, negotiation, analytical and stakeholder-management skills, with the ability to manage multiple priorities in an international environment. Experience supporting cybersecurity incidents, investigations, vulnerability or regulatory reporting, and working with regulators, audits or customer assessments. Experience with technology transactions, commercial agreements and cybersecurity/privacy provisions, as well as privacy reviews or impact assessments for technology products, services or internal initiatives. Familiarity with cybersecurity frameworks, industry standards and security practices, ideally gained in a global in-house legal environment. Excellent written and spoken English What we offer Opportunities for career development and growth. Performance-based rewards. Hybrid working model (office 3 days/home office 2 days a week). Up to three paid Personal Days annually, plus additional vacation days. 100% sick leave compensation for up to two months per year. A broad selection of soft and hard skills training, plus individual mentoring. Employer contribution to the Third Pillar Pension System, and life and life-events insurance fully covered by the company.