Information Security Governance Lead (GRC & ISF)

Liebherr Group; Madrid; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Flexible and hybrid working model

Meal vouchers

Life and accident insurance

Private health insurance option

International, family-owned company

Career development opportunities

Job summary

Liebherr IT Shared Service Centre Ibérica in Madrid is seeking a senior Governance professional to lead the design, implementation, and ongoing improvement of the Information Security Framework (ISF). You will align with regulatory demands (NIS2, GDPR) and standards (ISO 27001, NIST CSF) and support GRC platform and Customer Security Assurance services.

The role requires 5+ years in governance across global organizations, excellent English (German a plus), and the ability to drive

Qualifications

• Bachelor's or Master's in Cybersecurity or Computer Science.
• 5+ years in governance, GRC technology, and customer security assurance services delivery.
• Certifications: CISSP, CRISC, CISM, GSLC preferred.
• Excellent written and verbal English; German is a plus.
• Experience with ISF, NIST CSF, ISO 27001, IEC 62443; GDPR/NIS2 compliance.
• Ability to lead multi-stakeholder governance across global units.

Responsibilities

• Design, implement, and maintain the Information Security Framework (ISF) aligned with business needs and regulatory obligations.
• Oversee ISF governance processes, including stakeholder coordination and documentation.
• Collaborate to deliver GRC platform capabilities enabling digital ISF implementation.
• Support Customer Security Assurance Service governance to meet customer requirements.
• Develop governance metrics, dashboards, and reports for management.

Skills

Governance

GRC

Information Security

Agile / SAFe

Stakeholder management

Education

Bachelor's/Master's in Cybersecurity or Computer Science

Job description

Liebherr IT Shared Service Centre Ibérica in Madrid is seeking a senior Governance professional to lead the design, implementation, and ongoing improvement of the Information Security Framework (ISF). You will align with regulatory demands (NIS2, GDPR) and standards (ISO 27001, NIST CSF) and support GRC platform and Customer Security Assurance services.

The role requires 5+ years in governance across global organizations, excellent English (German a plus), and the ability to drive