Information Security Governance Product Owner (m/f/d)

Liebherr Group; Madrid; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Flexible and hybrid working model

Meal vouchers

Life and accident insurance

Private health insurance option

International exposure

Job summary

Liebherr Group seeks a senior governance specialist to lead the design, implementation, and continuous improvement of the global Information Security Framework (ISF) and related governance services in Madrid. You will integrate regulatory needs, industry standards, and customer requirements while coordinating cross‑functional stakeholders.

You’ll also guide GRC platform delivery and customer security assurance efforts, shaping dashboards and risk reporting for senior management and global

Qualifications

• Bachelor’s/Master’s in Cybersecurity, Computer Science, or related field.
• 5+ years in global organizations delivering Governance, GRC technology and customer security assurance services.
• Certificates such as CISSP, CRISC, CISM, GSLC are preferred.
• Excellent written and verbal English; German is a plus.
• Experience designing and maintaining information security governance frameworks with NIS2, GDPR, ISO/IEC 27001, IEC 62443.

Responsibilities

• Design, implement, and maintain the Information Security Framework (ISF) aligned to regulations and standards.
• Oversee governance processes, stakeholder coordination, and documentation.
• Support GRC platform delivery to enable digital ISF implementation.
• Ensure governance supports customer security requirements and reporting to management.

Skills

Governance design

GRC platforms

NIS2/GDPR compliance

ISO27001/NIST CSF

Education

Bachelor/Master in Cybersecurity

Tools

GRC platform

SAFe / Agile

Job description

Responsible for the delivery of the governance product and services: governance service: design, implementation and continuous improvement of the global Information Security Framework (ISF), aligning it with the evolving business needs, regulatory environment, industry standards and customer requirements. Support delivery of the GRC platform service and customer security assurance service.
The working location for this position will be in Madrid city, where we operate a hybrid model, requiring at least 40% of the working time on-site.

Creating passion: your responsibilities

• Information Security Framework (ISF) Management: Design, implement, and maintain the ISF: policies, standards, procedures, and control baselines, aligned to business needs, regulatory obligations (e.g. NIS2, GDPR), industry standards (e.g. NIST CSF, ISO 27001), and customer contractual requirements
• Regulatory Integration & Control Framework Alignment: Maintain inventory and traceability of external obligations (e.g. NIS2, GDPR, ISO/IEC 27001, IEC 62443) and customer requirements, integrating these into the ISF components (policies, controls)
• Governance Operations & Executive Engagement: Oversee ISF governance processes, including stakeholder coordination, approval workflows, and documentation.
• Collaborate and support the GRC platform service onwer to deliver technology required to enable digital implementation of the information security framework.
• Collaborate and support the Customer Security Assurance Service owner by delivering governance which supports the business to comply with customer security requirements.
• Governance Metrics & Reporting: Design key risk and performance indicators, dashboards and report on the governance product and services relevant for management at the Liebherr group, divisions and companies

Contributing your strengths: your qualifications

• Bachelor’s/Master’s in Cybersecurity, Computer Science, or related field
• 5+ years of working experience in global organizations including Governance, GRC technology and customer security assurance services delivery
• Following certificates are preferred: CISSP, CRISC, CISM, GSLC
• Excellent written and verbal communication skills in English, German is a plus
• Proven expertise in designing and maintaining information security governance frameworks using industry standards e.g. NIST CSF, ISO/IEC 27001, IEC 62443 and requirements in security regulations e.g. NIS2, GDPR, Defense contracting
• Ability to lead multi-stakeholder governance processes across global business units and ensure documentation is structured, endorsed, and maintained
• Experience in applying agile principles (e.g. iterative planning, continuous improvement, stakeholder collaboration) to the delivery and evolution of governance services, frameworks, or organizational processes
• Experience in owning and evolving enterprise GRC platforms to support compliance, risk, and governance services
• Strategic thinking combined with a pragmatic execution mindset, especially when aligning governance with operational realities
• Highly desirable: experience in product ownership and service delivery using SAFe (Scaled Agile Framework) or similar agile methodologies

Our commitment to you: your benefits

At Liebherr, we believe people are at the heart of our success. As part of our international team, you’ll enjoy a secure role in a family-owned company that values innovation, collaboration, and long-term career growth:

• Competitive compensation and benefits package that recognizes your expertise
• Flexible and hybrid working model
• Creative freedom and responsibility to shape processes and solutions in our global transformation
• Continuous learning and development with tailored training and certification opportunities
• Meal vouchers
• Life and accident insurance
• Option to include a premium private health insurance package as part of the flexible remuneration
• A safe, stable and international workplace within a trusted family business that invests in people

The Company

Liebherr is a family-run technology company that is not only one of the largest construction machinery manufacturers in the world, but also offers high-quality, user-oriented products and services in many other areas. The Group employs nearly 50,000 people in more than 140 companies on all continents.

Location

Liebherr IT Shared Service Centre Ibérica, S.L.
Madrid
Spain (ES)

Contact

Karoliina Rissanen
[e-mail]