InfoSec Governance Product Owner — Hybrid Madrid

Liebherr Group; Madrid; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Flexible and hybrid working model

Meal vouchers

Life and accident insurance

Private health insurance option

International exposure

Job summary

Liebherr Group seeks a senior governance specialist to lead the design, implementation, and continuous improvement of the global Information Security Framework (ISF) and related governance services in Madrid. You will integrate regulatory needs, industry standards, and customer requirements while coordinating cross‑functional stakeholders.

You’ll also guide GRC platform delivery and customer security assurance efforts, shaping dashboards and risk reporting for senior management and global

Qualifications

• Bachelor’s/Master’s in Cybersecurity, Computer Science, or related field.
• 5+ years in global organizations delivering Governance, GRC technology and customer security assurance services.
• Certificates such as CISSP, CRISC, CISM, GSLC are preferred.
• Excellent written and verbal English; German is a plus.
• Experience designing and maintaining information security governance frameworks with NIS2, GDPR, ISO/IEC 27001, IEC 62443.

Responsibilities

• Design, implement, and maintain the Information Security Framework (ISF) aligned to regulations and standards.
• Oversee governance processes, stakeholder coordination, and documentation.
• Support GRC platform delivery to enable digital ISF implementation.
• Ensure governance supports customer security requirements and reporting to management.

Skills

Governance design

GRC platforms

NIS2/GDPR compliance

ISO27001/NIST CSF

Education

Bachelor/Master in Cybersecurity

Tools

GRC platform

SAFe / Agile

Job description

Liebherr Group seeks a senior governance specialist to lead the design, implementation, and continuous improvement of the global Information Security Framework (ISF) and related governance services in Madrid. You will integrate regulatory needs, industry standards, and customer requirements while coordinating cross‑functional stakeholders.

You’ll also guide GRC platform delivery and customer security assurance efforts, shaping dashboards and risk reporting for senior management and global