Third Party Risk Management Product Owner (m/f/x)

Liebherr Group; Kirchdorf an der Iller; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Flexible and hybrid working

Company pension scheme

Healthy & regional catering

Company health management programme

EGYM Wellpass

Zusammenfassung

Liebherr-IT Services GmbH in Oberopfingen near Kirchdorf an der Iller offers a hybrid work model with flexible hours, combining on-site and mobile work. We are hiring an IT Security Specialist for Supply Chain to strengthen supplier risk management and cybersecurity across the global vendor network.

You will define security requirements for contracts, oversee supplier assessments, and drive improvements with Risk Management and Legal teams while coordinating with IT, OT, and executive

Qualifikationen

• Bachelor’s or Master’s degree in cybersecurity, computer science or related field.
• 7+ years in information security or related roles.
• 5+ years in medium to large organizations in supply/third party risk management.
• CISSP, CISM or CRISC are a plus.

Aufgaben

• Governance and program planning for global SCRM with Risk Management.
• Define standard cybersecurity requirements for contracts with Legal and Procurement.
• Implement supplier risk tiering and classification framework.
• Oversee supplier security assessments and remediation tracking.
• Maintain central inventory of suppliers with risk posture and status.
• Analyze trends from assessments and support audits and regulatory reporting.

Kenntnisse

Information security

Supply chain risk

Stakeholder management

SAFe / Agile

NIST CSF

ISO 27001

CISSP

CISM

CRISC

Ausbildung

Bachelor’s/Master’s in Cybersecurity

Computer Science or related field

Jobbeschreibung

At Liebherr-IT Services GmbH, we value the development of individual and entrepreneurial needs and therefore live the flex office: We work in a hybrid model with flexible working hours - both on site and mobile.

Internal title: IT Security Specialist - Supply Chain (m/f/x)

Creating passion: your responsibilities

• Governance and program planning: Own and operate the global SCRM process in close collaboration with the Risk Management Product team. Develop and maintain the SCRM process aligned with business needs, security risk appetite and compliance obligations.
• Contractual Security Requirements: Define standard cybersecurity requirements for contracts and collaborate with Legal and Procurement to ensure their adoption for high-risk suppliers.Review and approve exceptions to standard security clauses based on risk-based justifications.
• Supplier Risk Classification and Tiering: Implement supplier risk tiering and classification framework based on criticality, data access, regulatory exposure, and inherent risk. Ensure consistent application of the tiering model and conduct periodic reviews to adjust for changes in the threat landscape.
• Supplier Assessments and Security Assurance: Oversee the planning, scoping, and execution of supplier security assessments, including onboarding and recurring reviews. Manage external assessment providers and ensure timely, high-quality outputs. Track remediation plans for non-compliant suppliers and escalates unresolved risks.
• Operational Oversight: Maintain a central inventory of suppliers with risk tier classification, risk posture, and assessment status. Monitor and ensure SLA adherence of managed service providers conducting risk assessments and audits. Serve as the central point of contact for business units, Legal, Procurement, and Compliance regarding supplier risk issues.
• Continuous Improvement and Reporting: Analyze trends and findings from supplier assessments to drive service enhancements and efficiency. Report key risk indicators and metrics and support internal or external audits related to third-party risk. Support regulatory reporting requirements related to supplier security.

Contributing your strengths: your qualifications

• Bachelor’s/Master’s in Cybersecurity, Computer Science, or related field.
• 7+ years of working experience in information security, IT security or related roles.
• 5+ years of working experience in medium to large organizations in supply/third party risk management roles.
• Certifications such as CISSP, CISM, CRISC are a plus.
• Strong knowledge of governance frameworks related to supply chain risk management NIST CSF, SP800-161, ISO 27001 as well as Familiarity with VS-NfD and NIST SP 800-171 requirements.
• Demonstrated experience managing external assessment providers.
• Demonstrated ability to manage stakeholders across IT, OT, engineering, and executive leadership in complex environments.
• Highly desirable: experience in product ownership and service delivery using SAFe (Scaled Agile Framework) or similar agile methodologies.
• Excellent written and verbal communication skills in English and German is a plus

Our commitment to you: your benefits

As an internationally successful family business, the Liebherr Group offers you a secure job, a unique variety of tasks and exciting development opportunities. Become part of our strong team today and get to know the Liebherr Group as a reliable partner. Profit from these benefits:

• Attractive remuneration and social benefits
• Flexible and hybrid working
• Freedom for creative work
• Company pension scheme
• Crisis-proof workplace
• Individual development and training opportunities
• Employee benefits & discounts
• Bicycle leasing through salary conversion
• Healthy & regional catering in the company restaurant
• Company health management programme
• EGYM Wellpass

Get your own impression of our Oberopfingen site: Liebherr - Imagefilm Standort Oberopfingen - YouTube and find your perfect match in our family business: Liebherr - Finde dein perfektes Match! (youtube.com)

One Passion. Many Opportunities.

The Company

Liebherr-IT Services GmbH has its head office in Oberopfingen near Kirchdorf an der Iller and develops IT solutions for the entire Liebherr Group, coordinates the cross-location IT applications, and advises the companies in the entire Liebherr Group on IT issues.

Location

Liebherr-IT Services GmbH

St. Vitus 1

88457 Kirchdorf/Oberopfingen

Germany (DE)

Contact

Verena Maucher

[e-mail]