Lead Product Security Auditor (m/w/d)

Das ist der Job

Plan, coordinate, and lead audits across all Liebherr product divisions and sites worldwide.

Darum lohnt es sich

Interface with product teams, engineering, compliance, and management to communicate audit outcomes and drive remediation and improvement. Our commitment to you: your benefits As an internationally successful family business, the Liebherr Group offers you a secure job, a unique variety of tasks and exciting development opportunities.

Become part of our strong team today and get to know the Liebherr Group as a reliable partner.

Profit from these benefits: Attractive remuneration and social benefits Flexible and hybrid working Freedom for creative work Company pension scheme Crisis-proof workplace Individual development and training opportunities Employee benefits & discounts Bicycle leasing through salary conversion Healthy & regional catering in the company restaurant #J-18808-Ljbffr Design and manage the global product cybersecurity audit framework, including methodology, templates, reporting structures, and audit cycles.

Conduct high-priority and complex audits yourself, especially for critical or high-risk products. Lead and guide other auditors across the organization; define audit scopes, review findings, and ensure consistency in execution.

Ensure alignment of audit activities with relevant standards and regulations (e.g., UNECE R155/R156, IEC 62443, Aerospace). Evaluate secure development processes, threat/risk analyses (TARA), software update mechanisms, vulnerability and incident handling, and SBOM/HBOM practices.

Report audit results to executive stakeholders and ensure transparency on cybersecurity maturity across the product landscape. Monitor and interpret emerging cybersecurity regulations and translate them into audit criteria and updates to the framework.

Build internal competence by training and mentoring new auditors and supporting divisions in audit readiness. University degree in Cybersecurity, Computer Science, Engineering, or similar. 7+ years of experience in product cybersecurity or secure product development, with at least 3 years in a lead auditor or audit framework development role.

In-depth knowledge of cybersecurity standards (IEC 62443, ISO 27001, etc.) and their application to complex technical products. Proven ability to lead audit programs at group or enterprise level. Auditor certifications (e.g. ISO 27001 Lead Auditor, TISAX, IEC 62443, etc.) are a strong plus.

Confident in engaging with technical and executive audiences across different business units and cultures. Fluent in English (spoken and written); German is a plus.