Cyber Security Product Owner (m/f/d)

WELCOME TO BASF

At BASF, we enable secure, modern and user-friendly authentication across our global enterprise. Our team provides reliable login capabilities for business-critical applications across cloud and on-premises environments based on one federated identity.

We are responsible for authentication technologies such as Smartcards, Windows Hello for Business and FIDO2, ensuring secure access for employees and administrators worldwide. As a core part of BASF's Cyber Security and Identity & Access Management landscape, we are driving the adoption of phishing-resistant and passwordless authentication technologies that strengthen security while improving user experience.

To strengthen our team in Madrid, we are looking for a Senior Cyber Security Engineer who combines technical expertise, hands-on engineering and architectural thinking to help shape the future of authentication at one of the world's leading chemical companies.

RESPONSIBILITIES

• As a Senior Product Owner, you will be responsible for the overall success, strategy, and lifecycle management of BASF's authentication services.
• Your responsibilities will include:
• Own the vision, strategy, roadmap, and lifecycle management for BASF's authentication services, including Smartcard Management, Smartcards, Windows Hello for Business, and FIDO2
• Define and drive the product roadmap in alignment with BASF's Cyber Security, Identity Security, and Zero Trust strategies
• Prioritize business requirements, customer needs, security objectives, and technical capabilities to maximize product value
• Manage and continuously refine the product backlog, ensuring transparency and alignment across stakeholders
• Act as the primary interface between business stakeholders, Cyber Security teams, architects, engineers, service providers, and management
• Drive the adoption of phishing-resistant and passwordless authentication technologies across BASF
• Define service objectives, KPIs, service quality targets, and success metrics
• Lead product lifecycle activities, including demand management, service evolution, innovation management, and decommissioning decisions
• Ensure alignment between product investments, business priorities, compliance requirements, and operational capabilities
• Support architectural and technology decisions by providing product direction and business perspective
• Manage vendor relationships, service providers, contracts, and roadmap discussions
• Develop business cases and investment proposals for service improvements and strategic initiatives
• Identify risks, dependencies, and opportunities impacting service delivery and product success
• Collaborate closely with Product Managers, Architects, Cyber Security experts, Engineering teams, Operations teams, and business stakeholders globally
• Monitor industry trends and emerging technologies such as FIDO2, passkeys, post-quantum cryptography, and AI-supported operations
• Foster a culture of continuous improvement, innovation, customer focus, and operational excellence
• Contribute to agile product delivery processes, including backlog refinement, sprint planning, reviews, and prioritization activities

QUALIFICATIONS

• Bachelor's or Master's degree in Computer Science, Cyber Security, Information Technology, Business Information Systems, or a comparable qualification.
• Several years of experience as a Product Owner, Product Manager, Service Owner, or similar role in Cyber Security, IAM, or Enterprise IT environments.
• Strong understanding of authentication, identity, and access management concepts.
• Experience managing business-critical platforms and enterprise services throughout their lifecycle.
• Proven ability to define product strategies, roadmaps, and priorities while balancing business, technical, security, and operational requirements.
• Experience managing stakeholders across global and cross-functional organizations.
• Strong communication, negotiation, and presentation skills.
• Experience working in agile environments and managing product backlogs.
• Ability to translate complex technical topics into business value and decision-making material.
• Strong ownership mentality with the ability to drive initiatives from concept to value realization.
• Experience working with vendors and strategic partners.
• Excellent written and spoken English.

NICE TO HAVE

• Knowledge of authentication technologies such as Smartcards, FIDO2, Windows Hello for Business, MFA, and certificate-based authentication
• Experience with IAM platforms, SSO, federation technologies, and Microsoft Entra ID
• Understanding of Zero Trust architecture and modern identity security concepts
• Experience with Cyber Security governance, risk management, compliance, or audit requirements
• Familiarity with Azure DevOps or comparable agile management tools
• Understanding of cloud identity and authentication services
• Exposure to AI-supported operations and service optimization
• Affinity for learning and adapting to new technologies
• Experience working in international and distributed teams

WHAT WE OFFER

• A secure work environment because your health, safety and wellbeing is always our top priority.
• Flexible work schedule and Home-office options, so that you can balance your working life and private life.
• Learning and development opportunities
• 25 holiday days per year
• 5 additional days (readjustment)
• A collaborative, trustful and innovative work environment
• Being part of an international team and work in global projects
• Relocation assistance to Madrid provided

SALARY RANGE

Competitive salary between €55,000 and €65,000 gross per year, depending on experience and fit for the role.

At BASF, the chemistry is right

Because we are counting on innovative solutions, sustainable actions, connected thinking and on you, become a part of our formula for success and develop the future with us - in a global team that embraces diversity and equal opportunities irrespective of gender, age, origin, sexual orientation, disability or belief.At BASF, we are committed to upholding and ensuring compliance with company standards related to quality, environment, health, safety, and energy, in line with our global guidelines.We actively promote a culture of prevention and continuous improvement, encouraging collaboration in initiatives related to quality, environmental protection, health, safety, and energy performance.We foster responsible energy use, promoting efficiency in daily operations and supporting the identification of improvement projects and energy-saving opportunities