Information Security Specialist

Liebherr Group

full-time

Posted on: 9/18/2025

Origin: • 🇪🇸 Spain

✨ AI Apply

Mid-LevelSenior

Cyber Security

About the role

Lead the design, governance, and operational oversight of technology business resilience (TBR) across IT, OT, and technology products
Ensure structured processes, governance frameworks, and supporting tools for technology business continuity and disaster recovery management
Manage crisis management for major incidents (cyberattacks, natural disasters, pandemics, systemic technology failures)
Define and lead the lifecycle of the TBR product and services and translate resilience objectives into deliverable capabilities
Design and implement governance for TBC&DR plans and deliver process and GRC application; oversee business process criticality analysis and system security categorizations
Operate and maintain crisis management readiness at group, division, and company levels; deliver emergency notification, data and collaboration platforms
Deliver global training, tabletop exercises, and simulation programs via external service providers
Design key risk and performance indicators, dashboards and reporting for TBRC product and services across group, divisions and companies
Report to the global head of information security governance risk and compliance
Collaborate with stakeholders across IT, OT, engineering and executive leadership to implement resilience and DR programs

Bachelor’s/Master’s in Cybersecurity, Computer Science, or related field
5+ years of working experience in medium to large organizations delivering business continuity and disaster recovery management services and crisis management
Certifications such as CBCP, ISO 22301 Lead Implementer, or equivalent are strongly preferred
Strong knowledge of governance frameworks related to technology business continuity, disaster recovery and crisis management such as ISO 22301, NIST FIPS 199
Experience building and enabling global Business Impact Assessment (BIA) and Disaster Recovery (DR) programs using GRC platforms
Professional presence and crisis communication skills to lead response and represent resilience maturity to auditors and regulators
Experience with formal notification process to external parties and regulators
Demonstrated ability to manage stakeholders across IT, OT, engineering, and executive leadership
Ability to lead multi-stakeholder governance processes across global business units and ensure documentation is structured, endorsed, and maintained
Experience in applying agile principles (iterative planning, continuous improvement, stakeholder collaboration)
Experience in owning and evolving enterprise GRC platforms
Highly desirable: experience in product ownership and service delivery using SAFe or similar agile methodologies
Excellent written and verbal communication skills in English; German is a plus