IGA & PAM Product Owner (m/f/d)

Liebherr Group; Madrid; Presencial; EUR 70.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive compensation and benefits

Flexible and hybrid working model

Continuous learning and development

Meal vouchers

Life and accident insurance

Premium private health insurance option

Descripción de la vacante

Liebherr Group is expanding its Global Corporate Information Security team with an IGA & PAM Product Owner in Madrid. This role is crucial for delivering Identity Governance and Privileged Access Management services across the organization.

The ideal candidate will oversee the product backlogs, ensuring compliance and security across 55,000+ users and 2,500 applications, while collaborating with various stakeholders to achieve operational efficiency.

Formación

• Bachelor's degree in IT, Cyber Security, or equivalent experience.
• Fluency in English required; German and French skills are a plus.
• Experience with KPIs and continual service improvement processes.

Responsabilidades

• Manage the IGA & PAM product backlogs and priorities.
• Translate IAM strategy into delivery backlog items.
• Drive onboarding of applications into IGA lifecycle.

Conocimientos

Strong Product Owner experience in IAM, IGA, PAM

Fluency in English

Knowledge of modern security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001)

Understanding of Identity Governance concepts (JML, access reviews)

Knowledge of Privileged Access Management

Educación

Bachelor's degree in IT, Cyber Security

Cybersecurity certifications (CISSP, CISM)

Descripción del empleo

We are expanding our Global Corporate Information Security team and are looking for an IGA (Identity Governance and Administration) & PAM (Privileged Access Management) Product Owner (m/f/d) who is responsible for the delivery, prioritization, and operational execution of the Identity Governance & Administration (IGA) and Privileged Access Management (PAM) product backlogs. This role owns the day-to-day responsibility for translating IAM strategy, regulatory requirements, and risk drivers into consumable IGA and PAM services, while overall accountability remains with the Head of IAM Security. The Product Owner ensures close alignment across architecture, engineering, SOC, and business stakeholders to deliver scalable, compliant identity and privileged access capabilities. This role is central to the organization’s Zero Trust and regulatory compliance journey, directly reducing the highest impact cyber risks related to over privileged access and poor identity governance. You will shape how identities, entitlements, and privileged access are governed across 55,000+ users and 2,500 applications, influencing both security posture and operational efficiency at enterprise scale.

Responsibilities

• Own and manage the IGA & PAM product backlogs, priorities, and sprint objectives.
• Act as day to day Product Owner for Global IGA and Global PAM initiatives.
• Translate IAM strategy, regulatory obligations (NIS2, ISO 27001), and risk assessments into delivery backlog items.
• Coordinate with IAM Architects to ensure architectural intent is correctly implemented by engineering teams.
• Drive onboarding of applications, identities, and platforms into IGA lifecycle and PAM controls.
• Ensure alignment between IGA, PAM, IAM analytics, and SOC monitoring.
• Support tool selection, vendor engagement, and roadmap planning for IGA and PAM platforms.
• Drive adoption, communication, and change management with business and IT stakeholders.
• Provide clear reporting on delivery progress, risk reduction, and compliance KPIs to the Head of IAM.

Immediate Contributions

• Delivered a production ready Global IGA service covering JML automation, access governance, and access reviews.
• Established a unified Global PAM service enforcing least privilege, MFA, and just in time access.
• Implemented governance for non human identities (service accounts, technical IDs, automation).
• Defined and operationalized RBAC / PBAC role models across priority applications.
• Achieved measurable reduction in standing privileges and audit findings related to access governance.

Qualifications

• Bachelor’s degree in IT, Cyber Security, or equivalent experience. Cybersecurity certifications are advantageous: CISSP, CISM, Microsoft Endpoint-related certifications, or comparable alternatives.
• Fluency in English is a must. Skills in German and French are a plus.
• Knowledge of modern security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001).
• Experience implementing KPIs and running continual service improvement processes. Required skills and/or experience: Strong Product Owner experience in IAM, IGA, or PAM domains.
• Deep understanding of Identity Governance concepts: Joiner Mover Leaver (JML); Access reviews & certifications; Role and entitlement modelling (RBAC / PBAC).
• Strong knowledge of Privileged Access Management: Vaulting & credential rotation; Just in time access & MFA enforcement; Privileged session monitoring.
• Ability to balance risk, compliance, and delivery pragmatism in complex enterprises.

Preferred

• Experience with IGA and PAM tooling in large, multi domain environments.
• Exposure to non human identity governance (service accounts, automation, APIs).
• Experience operating in regulated environments (ISO 27001, NIS2).
• Strong collaboration experience with SOC and audit teams.

Benefits

• Competitive compensation and benefits package that recognizes your expertise.
• Flexible and hybrid working model.
• Creative freedom and responsibility to shape processes and solutions in our global transformation.
• Continuous learning and development with tailored training and certification opportunities.
• Meal vouchers.
• Life and accident insurance.
• Option to include a premium private health insurance package as part of the flexible remuneration.
• A safe, stable and international workplace within a trusted family business that invests in people.

Location

Liebherr IT Shared Service Centre Ibérica, S.L.
Parque Norte. Alamo building Serrano Galvache, 56
28033 Madrid
Spain (ES)

Contact

Karoliina Rissanen
[e-mail]