ResponsibilitiesInformation Security Framework (ISF) Management: Design, implement, and maintain the ISF: policies, standards, procedures, and control baselines, aligned to business needs, regulatory obligations (e.g. NIS2, GDPR), industry standards (e.g. NIST CSF, ISO 27001), and customer contractual requirements.Regulatory Integration & Control Framework Alignment: Maintain inventory and traceability of external obligations (e.g. NIS2, GDPR, ISO/IEC 27001, IEC 62443) and customer requirements, integrating these into the ISF components.Governance Operations & Executive Engagement: Oversee ISF governance processes, including stakeholder coordination, approval workflows, and documentation.Collaborate and support the GRC platform service owner to deliver technology required to enable digital implementation of the information security framework.Collaborate and support the Customer Security Assurance Service owner by delivering governance which supports the business to comply with customer security requirements.Governance Metrics & Reporting: Design key risk and performance indicators, dashboards and report on the governance product and services relevant for management at the Liebherr group, divisions and companies.QualificationsBachelor's/Master's in Cybersecurity, Computer Science, or related field.5+ years of working experience in integral organizations including Governance,



GRC technology and customer security assurance services delivery.Following certificates are preferred: CISSP, CRISC, CISM, GSLC.Excellent written and verbal communication skills in English, German is a plus.Proven expertise in designing and maintaining information security governance frameworks using industry standards (e.g. NIST CSF, ISO/IEC 27001, IEC 62443) and requirements in security regulations (e.g. NIS2, GDPR, Defense contracting).Ability to lead multi-stakeholder governance processes across global business units.Experience in applying agile principles to the delivery and evolution of governance services.Experience in owning and evolving enterprise GRC platforms.Strategic thinking combined with a pragmatic execution mindset.Highly desirable: experience in product ownership and service delivery using SAFe (Scaled Agile Framework) or similar agile methodologies.BenefitsCompetitive compensation and benefits package.Flexible and hybrid working model (Madrid, at least 40% on-site).Creative freedom and responsibility to shape processes and solutions.Continuous learning and development with tailored training and certification opportunities.Meal vouchers.Life and accident insurance.Option to include a premium private health insurance package.A safe, stable and international workplace.
#J-18808-Ljbffr

📌 Information Security Governance Product Owner (m/f/d) (Madrid)
🏢 Tamarind Intelligence
📍 Madrid