07 sep
|
Liebherr IT Shared Service Centre Ibérica
|
Madrid
07 sep
Liebherr IT Shared Service Centre Ibérica
Madrid
We are expanding our Integral Corporate Information Security (CIS) team and are looking for an Information Security Compliance Product Owner (M/F/d) to establish and scale our global security compliance and certification capabilities.
The Information Security Compliance Product Owner owns the Information Security Compliance Product within the Information Security Governance, Risk and Compliance (GRC) portfolio and is accountable for ensuring that regulatory, contractual, and certification requirements related to information and cybersecurity are identified, assessed, and integrated into the organization’s Information Security Framework (ISF).
This role combines product ownership, project delivery and service execution, working closely with internal and external stakeholders.
Creating passion: your responsibilities:
- Compliance Product Ownership & ISF Alignment: Define and own the Compliance Product scope, roadmap, operating model, and KPIs aligned with CIS and GRC strategy. Ensure continuous alignment of ISF components (policies, standards, procedures, control baselines)
with regulatory, contractual, and certification requirements.
-
Regulatory Compliance: Maintain a centralized inventory of applicable information and cybersecurity regulations (e.g. NIS2, GDPR, CRA, EU AI Act, defense-related obligations). Perform regulatory applicability assessments and structured compliance gap analyses. Define, track, and report remediation plans for identified compliance gaps. Monitor regulatory changes and ensure timely updates to the ISF.
-
Security standards compliance and certification (ISO/IEC 27001): Govern ISMS and CSMS documentation, readiness, and support in companies certification activities, including maintaining required evidence and ensure delivery during internal and external audits, Track audit findings and corrective actions to closure for areas of responsibility.
-
Customer & Stakeholder Assurance: Support with answering to compliance and security assessments
📌 Information Security Compliance Product Owner (Madrid)
🏢 Liebherr IT Shared Service Centre Ibérica
📍 Madrid