Head of Information Security Architecture (m/f/d)

Liebherr Group; Madrid; Hybride; EUR 120 000 - 160 000; Plein temps

Avantages offerts par ce poste

Competitive compensation package

Flexible and hybrid working model

Continuous learning and certification

Meal vouchers

Life and accident insurance

Premium private health insurance (flex

Global transformation involvement

Résumé du poste

Liebherr Group in Madrid is expanding its Corporate Information Security Team and seeks a Head of Information Security Architecture to define and govern the security architecture strategy across IT, OT, cloud, data and digital products.

Reporting to the Global CISO, you will lead the architecture team, establish security by design, and ensure risk- and regulatory-aligned decisions, while enabling secure innovation in a hybrid work model.

Qualifications

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Engineering or a related field.
• Proven ability to establish Security by Design, architecture governance, standards and target-state architectures.
• Strong leadership and ability to translate business, risk and regulatory requirements into clear architecture decisions and guardrails.
• Strong knowledge of enterprise architecture and security architecture frameworks such as TOGAF and SABSA, and security standards such as NIST CSF, ISO/IEC 27001 and IEC 62443.
• Professional fluency in English is required; German language skills are an advantage.
• Willingness to travel internationally (up to 30%) as required by project work.

Responsabilités

• Define, maintain and govern information security architecture principles, standards, patterns, reference architectures and reusable blueprints.
• Provide integrated architectural direction across identity and access, cloud, network and Zero Trust, infrastructure, endpoint, data protection, security monitoring, OT and Product Security.
• Translate business risk, cybersecurity risk, regulatory obligations and security policies into architecture principles, patterns and technical control requirements.
• Establish and drive Security by Design, embedding proportionate security requirements into initiatives from idea, investment and design through implementation and operation.
• Lead the Information Security Architecture team, governance processes and decision rights, including intake, reviews, escalation and exceptions.
• Define and report meaningful KPIs and KRIs covering standards adoption, review outcomes, exceptions, technical debt, Security-by-Design effectiveness and target-state maturity.

Connaissances

Leadership

Security architecture

Enterprise architecture

Security standards

TOGAF/SABSA

English proficiency

German language (advantage)

Travel up to 30%

Formation

Bachelor's/Master's in Cybersecurity/CS/Engineering

Certifications: CISSP, CISM, SABSA, TOGAF, ITIL, COBIT

English fluency required

German language advantageous

Description du poste

We are expanding our Corporate Information Security Team and look forward to welcoming new colleagues and leaders. We are looking for aHead of Information Security Architecture (m/f/d) .

Reporting to the Global CISO, you will define how security is embedded across Liebherr’s IT, OT, cloud, data, digital products and emerging technology landscape. You will own the information security architecture strategy, target state, principles and governance, translate business risks and regulatory obligations into scalable architectural direction, and drive Security by Design from idea through to operation.

The role leads the Information Security Architecture team and acts as the enterprise-level security architecture authority in close partnership with Enterprise Architecture and all Corporate Information Security domains.

The working location for this position will be in Madrid city where we are currently setting up a new office. We operate a hybrid model, requiring at least 40% of the working time on-site on a weekly basis.

Creating passion: your responsibilities

Principles, standards and reference architectures:

• Define, maintain and govern information security architecture principles, standards, patterns, reference architectures and reusable blueprints.
• Provide integrated architectural direction across identity and access, cloud, network and Zero Trust, infrastructure, endpoint, data protection, security monitoring, OT and Product Security.
• Contribute to the information security architecture strategy and roadmap, aligning security architecture with business and CIS priorities.
• Define security architecture guardrails for AI and emerging technologies, partnering with key stakeholders to ensure secure-by-design solutions aligned with risk, policy and regulatory requirements.

Security by Design and architecture governance:

• Establish and drive Security by Design, embedding proportionate security requirements into initiatives from idea, investment and design through implementation and operation.
• Establish and chair the information security architecture decision, and governance process, including architecture intake, design reviews, decision rights, approval criteria, escalation paths and exception management.
• Design a scalable, risk-based engagement model that supports delivery teams without making Information Security Architecture a bottleneck.

Risk, regulatory and threat alignment:

• Translate business risk, cybersecurity risk, regulatory obligations and security policies into architecture principles, patterns and technical control requirements in collaboration with Security GRC and accountable control owners.
• Ensure architecture decisions reflect relevant threats, attack paths, systemic risks and lessons from security operations, incidents, assurance activities and vulnerability exposure.
• Advise senior management on strategic security risks, architectural trade-offs, residual risk and major technology decisions.

Stakeholder leadership and architecture community:

• Provide enterprise-level architectural authority and coordination for IT, OT, product engineering, business and Corporate Information Security stakeholders.
• Build strong partnerships with Enterprise Architecture, technology platforms, engineering teams, divisional security functions and relevant governance bodies. Team leadership and performance.
• Lead and manage the Information Security Architecture team, including organizational design, hiring, objectives, performance management, succession and capacity planning.
• Define and report meaningful KPIs and KRIs covering standards adoption, review outcomes, exceptions, technical debt, Security-by-Design effectiveness and target-state maturity.

Contributing your strengths: your qualifications

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Engineering or a related field, or equivalent relevant professional experience.
• Proven ability to establish Security by Design, architecture governance, standards and target-state architectures.
• Strong leadership and ability to translate business, risk and regulatory requirements into clear architecture decisions and guardrails.
• Strong knowledge of enterprise architecture and security architecture frameworks such as TOGAF and SABSA, and security standards such as NIST CSF, ISO/IEC 27001 and IEC 62443.
• Professional fluency in English is required; German language skills are an advantage.
• Willingness to travel internationally (up to 30%) as required by project work.

Preferred certifications Relevant certifications are advantageous, for example: CISSP, CISM, SABSA, TOGAF, ITIL, COBIT, and cloud or technology-specific architecture certifications across Microsoft Azure, AWS or Google Cloud.

Our commitment to you: your benefits

At Liebherr, we believe people are at the heart of our success. As part of our international team, you’ll enjoy a secure role in a family-owned company that values innovation, collaboration, and long-term career growth:

• Competitive compensation and benefits package that recognizes your expertise
• Flexible and hybrid working model
• Creative freedom and responsibility to shape processes and solutions in our global transformation
• Continuous learning and development with tailored training and certification opportunities
• Meal vouchers
• Life and accident insurance
• Option to include a premium private health insurance package as part of the flexible remuneration
• A safe, stable and international workplace within a trusted family business that invests in people

One Passion. Many Opportunities.