ph3Overview /h3 pResponsible for the delivery of the governance product and services: governance service: design, implementation and continuous improvement of the general Information Security Framework (ISF), aligning it with the evolving business needs, regulatory environment, industry standards and customer requirements. Support delivery of the GRC platform service and customer security assurance service. The working location for this position will be in Madrid city, where we operate a hybrid model, requiring at least 40% of the working time on-site. /p h3Responsibilities /h3 ul liInformation Security Framework (ISF) Management: Design, implement, and maintain the ISF: policies, standards, procedures, and control baselines, aligned to business needs, regulatory obligations (e.g. NIS2, GDPR), industry standards (e.g. NIST CSF, ISO 27001), and customer contractual requirements /li liRegulatory Integration Control Framework Alignment: Maintain inventory and traceability of external obligations (e.g. NIS2, GDPR, ISO/IEC 27001, IEC 62443) and customer requirements, integrating these into the ISF components (policies, controls) /li liGovernance Operations Executive Engagement: Oversee ISF governance processes, including stakeholder coordination, approval workflows, and documentation. /li liCollaborate and support the GRC platform service owner to deliver technology required to enable digital implementation of the information security framework. /li liCollaborate and support the Customer Security Assurance Service owner by delivering governance which supports the business to comply with customer security requirements. /li liGovernance Metrics Reporting: Design key risk and performance indicators, dashboards and report on the governance product and services relevant for management at the Liebherr group, divisions and companies /li /ul h3Qualifications /h3 ul liBachelor’s/Master’s in Cybersecurity, Computer Science,



or related field /li li5+ years of working experience in global organizations including Governance, GRC technology and customer security assurance services delivery /li liFollowing certificates are preferred: CISSP, CRISC, CISM, GSLC /li liExcellent written and verbal communication skills in English, German is a plus /li liProven expertise in designing and maintaining information security governance frameworks using industry standards e.g. NIST CSF, ISO/IEC 27001, IEC 62443 and requirements in security regulations e.g. NIS2, GDPR, Defense contracting /li liAbility to lead multi-stakeholder governance processes across global business units and ensure documentation is structured, endorsed, and maintained /li liExperience in applying agile principles (e.g. iterative planning, continuous improvement, stakeholder collaboration) to the delivery and evolution of governance services, frameworks, or organizational processes /li liExperience in owning and evolving enterprise GRC platforms to support compliance, risk, and governance services /li liStrategic thinking combined with a pragmatic execution mindset, especially when aligning governance with operational realities /li liHighly desirable: experience in product ownership and service delivery using SAFe (Scaled Agile Framework) or similar agile methodologies /li /ul h3Benefits /h3 ul liCompetitive compensation and benefits package that recognizes your expertise /li liFlexible and hybrid working model /li liCreative freedom and responsibility to shape processes and solutions in our global transformation /li liContinuous learning and development with tailored training and certification opportunities /li liMeal vouchers /li liLife and accident insurance /li liOption to include a premium private health insurance package as part of the flexible remuneration /li liA safe, stable and international workplace within a trusted family business that invests in people /li /ul h3Location /h3 pLiebherr IT Shared Service Centre Ibérica, S.L., Madrid, Spain (ES) /p /p #J-18808-Ljbffr

📌 Information Security Governance Product Owner (m/f/d) (Madrid)
🏢 Liebherr Group
📍 Madrid