About this role
<div class="rmk-main-content"> <p class="rmk-introduction"><p><span style="">At Liebherr-IT Services GmbH, we value the development of individual and entrepreneurial needs and therefore live the flex office: We work in a hybrid model with flexible working hours - both on site and mobile. </span></p> <p><span style="">Internal title: IT Security Specialist - Supply Chain (m/f/x)</span></p></p> <h2 class="rmk-responsibilites-header">Creating passion: your responsibilities</h2> <div class="rmk-resposibilities-content"><ul> <li><span style="">Governance and program planning: Own and operate the global SCRM process in close collaboration with the Risk Management Product team. Develop and maintain the SCRM process aligned with business needs, security risk appetite and compliance obligations. </span></li> <li><span style="">Contractual Security Requirements: Define standard cybersecurity requirements for contracts and collaborate with Legal and Procurement to ensure their adoption for high-risk suppliers.Review and approve exceptions to standard security clauses based on risk-based justifications. </span></li> <li><span style="">Supplier Risk Classification and Tiering: Implement supplier risk tiering and classification framework based on criticality, data access, regulatory exposure, and inherent risk. Ensure consistent application of the tiering model and conduct periodic reviews to adjust for changes in the threat landscape. </span></li> <li><span style="">Supplier Assessments and Security Assurance: Oversee the planning, scoping, and execution of supplier security assessments, including onboarding and recurring reviews. Manage external assessment providers and ensure timely, high-quality outputs.Track remediation plans for non-compliant suppliers and escalate unresolved risks. </span></li> <li><span style="">Operational Oversight: Maintain a central inventory of suppliers with risk tier classification, risk posture, and assessment status. Monitor and ensure SLA adherence of managed service providers conducting risk assessments and audits.Serve as the central point of contact for business units, Legal, Procurement, and Compliance regarding supplier risk issues. </span></li> <li><span style="">Continuous Improvement and Reporting: Analyze trends and findings from supplier assessments to drive service enhancements and efficiency. Report key risk indicators and metrics and support internal or external audits related to third-party risk. Support regulatory reporting requirements related to supplier security. </span></li> </ul></div> <h2 class="rmk-qualification-header">Contributing your strengths: your qualifications</h2> <div class="rmk-qualification-content"><ul> <li><span style="">Bachelor’s/Master’s in Cybersecurity, Computer Science, or related field. </span></li> <li><span style="">7+ years of working experience in information security, IT security or related roles. </span></li> <li><span style="">5+ years of working experience in medium to large organizations in supply/third party risk management roles. </span></li> <li><span style="">Certifications such as CISSP, CISM, CRISC are a plus. </span></li> <li><span style="">Strong knowledge of governance frameworks related to supply chain risk management NIST CSF, SP800-161, ISO 27001 as well as Familiarity with VS-NfD and NIST SP 800-171 requirements. </span></li> <li><span style="">Demonstrated experience managing external assessment providers. </span></li> <li><span style="">Demonstrated ability to manage stakeholders across IT, OT, engineering, and executive leadership in complex environments. </span></li> <li><span style="">Highly desirable: experience in product ownership and service delivery using SAFe (Scaled Agile Framework) or similar agile methodologies. </span></li> <li><span style="">Excellent written and verbal communication skills in English and German is a plus.</span></li> </ul></div> <h2 class="rmk-our-offer-header">Our commitment to you: your benefits</h2> <div class="rmk-our-offer-content"><p><span style="">As an internationally successful family business, the Liebherr Group offers you a secure job, a unique variety of tasks and exciting development opportunities. Become part of our strong team today and get to know the Liebherr Group as a reliable partner. Profit from these benefits:</span></p> <p> </p> <ul> <li><span style="">Attractive remuneration and social benefits</span></li> <li><span style="">Flexible and hybrid working</span></li> <li><span style="">Freedom for creative work </span></li> <li><span style="">Company pension scheme</span></li> <li><span style="">Crisis-proof workplace</span></li> <li><span style="">Individual development and training opportunities</span></li> <li><span style="">Employee benefits & discounts</span></li> <li><span style="">Bicycle leasing through salary conversion </span></li> <li><span style="">Healthy & regional catering in the company restaurant</span></li> <li><span style="">Company health management programme</span></li> <li><span style="">EGYM Wellpass</span></li> </ul> <p> </p> <p><span style="">Get your own impression of our Oberopfingen site: <a href="https://www.youtube.com/watch?v=CriM8oAD4G4" rel="nofollow">Liebherr - Imagefilm Standort Oberopfingen - YouTube</a> and find your perfect match in our family business: <a href="https://www.youtube.com/watch?v=JvlAzpFl8I8&list=PLRWbihl-JTGWHZJVxWIG2FnqNcpAaZUtd&index=5" rel="nofollow">Liebherr - Finde dein perfektes Match! (youtube.com)</a></span></p> <p> </p> <p><span style="">Please only use the online application option.</span></p></div> <div class="rmk-posting-closure"> <p class="rmk-closure-content">Haben wir Ihr Interesse geweckt? Dann freuen wir uns über Ihre Online-Bewerbung. Bei Fragen kontaktieren Sie bitte Verena Maucher.</p> <p class="rmk-closure-claim"><b>One Passion. Many Opportunities.</b></p> </div> </div> <h2 class="rmk-company-header">Das Unternehmen</h2> <p class="rmk-company-content"><span id="cke_bm_4414S" style="display:none"> </span>Die Liebherr-IT Services GmbH mit Sitz in Oberopfingen bei Kirchdorf an der Iller erarbeitet IT-Lösungen für die gesamte Firmengruppe, koordiniert die standortübergreifenden IT-Anwendungen und berät die Gesellschaften der gesamten Firmengruppe in IT-Fragen.<span id="cke_bm_1976S" style="display:none"> </span> </p> <h2 class="rmk-address-header">Standort</h2> <div class="rmk-address-content"> <p class="rmk-company-name">Liebherr-IT Services GmbH </p> <p class="rmk-adressline">St. Vitus 1</p> <p><span class="rmk-postal-code">88457</span> <span class="rmk-city">Kirchdorf/Oberopfingen</span></p> <p class="rmk-country">Deutschland (DE)</p> </div> <h2 class="rmk-recruiter-header">Kontakt</h2> <div class="rmk-recruiter"> <p class="rmk-recruiter-name">Verena Maucher</p> <p class="rmk-recruiter-contact">[email protected]</p> <p class="rmk-recruiter-contact-additional"></p> </div>