Third Party Risk Management Product Owner (m/f/x)

div class=rmk-main-contentp class=rmk-introductionpspan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptAt Liebherr-IT Services GmbH, we value the development of individual and entrepreneurial needs and therefore live the flex office: We work in a hybrid model with flexible working hours - both on site and mobile. /span/ppspan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptInternal title: IT Security Specialist - Supply Chain (m/f/x)/span/p/ph2 class=rmk-responsibilites-headerCreating passion: your responsibilities/h2div class=rmk-resposibilities-contentullispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptGovernance and program planning: Own and operate the global SCRM process in close collaboration with the Risk Management Product team. Develop and maintain the SCRM process aligned with business needs, security risk appetite and compliance obligations. /span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptContractual Security Requirements: Define standard cybersecurity requirements for contracts and collaborate with Legal and Procurement to ensure their adoption for high-risk suppliers.Review and approve exceptions to standard security clauses based on risk-based justifications. /span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptSupplier Risk Classification and Tiering: Implement supplier risk tiering and classification framework based on criticality, data access, regulatory exposure, and inherent risk. Ensure consistent application of the tiering model and conduct periodic reviews to adjust for changes in the threat landscape. /span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptSupplier Assessments and Security Assurance: Oversee the planning, scoping, and execution of supplier security assessments, including onboarding and recurring reviews. Manage external assessment providers and ensure timely, high-quality outputs.Track remediation plans for non-compliant suppliers and escalate unresolved risks. /span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptOperational Oversight: Maintain a central inventory of suppliers with risk tier classification, risk posture, and assessment status. Monitor and ensure SLA adherence of managed service providers conducting risk assessments and audits.Serve as the central point of contact for business units, Legal, Procurement, and Compliance regarding supplier risk issues. /span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptContinuous Improvement and Reporting: Analyze trends and findings from supplier assessments to drive service enhancements and efficiency. Report key risk indicators and metrics and support internal or external audits related to third-party risk. Support regulatory reporting requirements related to supplier security. /span/li/ul/divh2 class=rmk-qualification-headerContributing your strengths: your qualifications/h2div class=rmk-qualification-contentullispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptBachelor’s/Master’s in Cybersecurity, Computer Science, or related field. /span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0pt7+ years of working experience in information security, IT security or related roles. /span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0pt5+ years of working experience in medium to large organizations in supply/third party risk management roles. /span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptCertifications such as CISSP, CISM, CRISC are a plus. /span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptStrong knowledge of governance frameworks related to supply chain risk management NIST CSF, SP800-161, ISO 27001 as well as Familiarity with VS-NfD and NIST SP 800-171 requirements. /span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptDemonstrated experience managing external assessment providers. /span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptDemonstrated ability to manage stakeholders across IT, OT, engineering, and executive leadership in complex environments. /span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptHighly desirable: experience in product ownership and service delivery using SAFe (Scaled Agile Framework) or similar agile methodologies. /span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptExcellent written and verbal communication skills in English and German is a plus./span/li/ul/divh2 class=rmk-our-offer-headerOur commitment to you: your benefits/h2div class=rmk-our-offer-contentpspan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptAs an internationally successful family business, the Liebherr Group offers you a secure job, a unique variety of tasks and exciting development opportunities. Become part of our strong team today and get to know the Liebherr Group as a reliable partner. Profit from these benefits:/span/pp /pullispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptAttractive remuneration and social benefits/span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptFlexible and hybrid working/span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptFreedom for creative work /span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptCompany pension scheme/span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptCrisis-proof workplace/span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptIndividual development and training opportunities/span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptEmployee benefits amp; discounts/span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptBicycle leasing through salary conversion /span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptHealthy amp; regional catering in the company restaurant/span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptCompany health management programme/span/lilispan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptEGYM Wellpass/span/li/ulp /ppspan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptGet your own impression of our Oberopfingen site: a href=https://www.youtube.com/watch?v=CriM8oAD4G4 rel=nofollowLiebherr - Imagefilm Standort Oberopfingen - YouTube/a and find your perfect match in our family business: a href=https://www.youtube.com/watch?v=JvlAzpFl8I8amp;list=PLRWbihl-JTGWHZJVxW… rel=nofollowLiebherr - Finde dein perfektes Match! (youtube.com)/a/span/pp /ppspan style=font-family:arial, helvetica, sans-serif;font-size:14.0ptPlease only use the online application option./span/p/divdiv class=rmk-posting-closurep class=rmk-closure-contentHaben wir Ihr Interesse geweckt? Dann freuen wir uns über Ihre Online-Bewerbung. Bei Fragen kontaktieren Sie bitte Verena Maucher./pp class=rmk-closure-claimbOne Passion. Many Opportunities./b/p/div/divh2 class=rmk-company-headerDas Unternehmen/h2p class=rmk-company-content​span id=cke_bm_4414S style=display:none /spanDie Liebherr-IT Services GmbH mit Sitz in Oberopfingen bei Kirchdorf an der Iller erarbeitet IT-Lösungen für die gesamte Firmengruppe, koordiniert die standortübergreifenden IT-Anwendungen und berät die Gesellschaften der gesamten Firmengruppe in IT-Fragen.span id=cke_bm_1976S style=display:none /span /ph2 class=rmk-address-headerStandort/h2div class=rmk-address-contentp class=rmk-company-nameLiebherr-IT Services GmbH /pp class=rmk-adresslineSt. Vitus 1/ppspan class=rmk-postal-code88457/span span class=rmk-cityKirchdorf/Oberopfingen/span/pp class=rmk-countryDeutschland (DE)/p/divh2 class=rmk-recruiter-headerKontakt/h2div class=rmk-recruiterp class=rmk-recruiter-nameVerena Maucher/pp class=rmk-recruiter-contactverena.maucher@liebherr.com/pp class=rmk-recruiter-contact-additional/p/div