Senior Manager

Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world's largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo's continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY). This transformation together with Lenovo's world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. We are seeking aa Privacy Operation Specialistin our global Privacy team to support privacy and cybersecurity compliance across Latin America while contributing to global privacy operations. This role is responsible for the end‐to‐end coordination and operational management of Data Subject Requests (DSRs) across the organization, contract review, data privacy impact assessments and broader privacy operations management support. You will work closely with senior privacy counsel, data owners, and cross‐functional teams to ensure timely, compliant, and high‐quality responses. The candidate must have either legal, cybersecurity or technical background and some prior exposure to privacy and data protection , strong communication skills with business and product teams, and familiarity with information security issues. Approximately 30% of the role will be dedicated to cybersecurity-related matters, requiring sufficient knowledge to interact with technical teams, assess legal and regulatory risks, and support incident response. At times this role may also be partnering with the global operation lead on global projects, such as implementation of global privacy tools and optimization of review processes. Review data protection documents, impact assessments, privacy questionnaires, data flows, regulatory risks and mitigation measures, data subject requests (DSRs), processing records, training programs, internal policies, and privacy compliance controls. Collaborate closely with privacy counsel to elevate complex cases, validate legal interpretations, and ensure appropriate handling of sensitive requests. Support internal departments on issues related to privacy, personal data protection, and cybersecurity. Provide guidance on the practical application of Mexican personal data protection legislation and, when necessary, applicable regional and global frameworks. Review contractual clauses, privacy terms, internal policies, privacy notices, and documents related to the processing of personal data. Manage and maintain privacy tools such as Onetrust, including configurations, workflows, and reporting. Collaborate with information security teams on security incidents, data breaches, technical controls, vulnerability management, cyber risks, and related regulatory requirements, to make sure projects/tasks are on track and well documented. Monitor regulatory trends and best practices in privacy, data protection, AI, information security, and technology. Participate in cross-regional working groups to align on best practices, tools, and enforcement standards. At least five years of experience in privacy compliance, either at a prestigious law firm or within the legal or compliance function of a multinational corporation. Knowledge of Mexican personal data protection legislation, including obligations related to privacy notices, consent, data subjects' rights, data transfers, security measures, and incident management. Practical knowledge of information security, cybersecurity, and incident management involving personal data. Excellent organizational and time‐management skills. Ability to work with multidisciplinary and multicultural teams, including legal, product, engineering, information security, and business units. Fluent english is essential for interacting with global teams Strong communication skills, practical legal judgment, organizational skills, business oriented approach and the ability to prioritize tasks in a dynamic environment. Familiar with LFPDPPP, GDPR, LGPD, CCPA/CPRA, or other international data protection laws is a plus. Familiar with privacy governance tools, GRC, third-party management, or processing activity logs. Certifications in privacy, data protection, or information security, such as CIPP/E, CIPP/US, CIPM, CDPO, ISO *, Security+, CISSP, or equivalent. We are equal opportunity employer and do not discriminate against any employee or applicant for employment becauseof race, color, sex, age national origin,