Security Consultant – IT Risk & Penetration Testing

About the role

Lenovo is seeking a Security Consultant to strengthen its IT security posture. You will work across systems, applications and network operations to identify, assess and mitigate risks.

Key responsibilities

• Conduct comprehensive risk and control assessments for IT systems, applications and network operations.
• Perform penetration testing to uncover vulnerabilities and evaluate security controls.
• Develop and implement remediation plans based on test findings.
• Support security teams in defining policies, procedures and control frameworks.
• Evaluate IT control processes to ensure effective design and operation.
• Facilitate audit and security control reviews with internal and external stakeholders.
• Enhance threat detection, attack mitigation and overall security measures.
• Promote communication and collaboration on risk and cybersecurity matters.

Required profile

• Degree in Computer Science, Information Technology, Information Systems or related field.
• Minimum 2 years of experience in Information Security or Technology Risk Management.
• Stakeholder‑management experience and ability to foster a positive risk culture.
• Knowledge of Business Continuity, Project Management and Application Security best practices.
• Relevant certifications (e.g., CISSP, CISA, CISM, OSCP, CEH, CRTP, CRT) are a plus.

Required skills

• Penetration testing
• Risk assessment and control evaluation
• IT security controls
• Threat detection and mitigation
• Application security
• Business continuity planning
• Project management
• Relevant certifications such as CISSP, CISA, CISM, OSCP, CEH, CRTP, CRT