About the role
Are you passionate about Information Security, Data Protection, or technology and motivated by helping the business operate securely and compliantly? Do you enjoy working at the intersection of governance, risk management, technology, and legal requirements while supporting projects and stakeholders in an increasingly digital and data-driven world?
We are seeking an Information Security & Data Protection Expert to join our Governance team for Corporate & Service Areas . In this second-line governance role, you will advise organizational entities on behalf of the Group DPO, support the development of their governance setup, assess risks and controls, perform audits and monitoring activities, and track remediation. You will provide independent, risk-based guidance and transparency while operational ownership and implementation remain with the responsible organizational entities.
Your contribution to something big:
• Information Security & Data Protection Advisor y: Serve as a trusted advisor to business departments, projects, and associates on Information Security and Data Protection matters. Provide practical and risk-based guidance to support compliant and secure business operations.
• Governance Advisory & Organizational Enablement: Consult organizational entities of the Bosch Group on behalf of the Group DPO and support the establishment and continuous improvement of Information Security and Data Protection governance structures.
• Risk & Control Oversight: Conduct and maintain group-wide Information Security and Data Protection risk assessments and provide transparent, risk-based recommendations for informed management decisions.
• Auditing, Monitoring & Assurance: Perform audits and ongoing monitoring activities, prepare and accompany internal and external audits, identify control weaknesses and governance gaps, and track remediation measures through to successful closure.
• Governance Reporting & Management Information: Prepare risk and control dashboards, reports, and management information to provide transparency on governance effectiveness, risk exposure, and improvement opportunities.
• Policy & Control Framework Development: Support the development, maintenance, and rollout of global Information Security and Data Protection policies, governance requirements, and control procedures.
What distinguishes you:
Education: University degree in Information Security, Computer Science, Information Systems, Business Administration, Law, Risk Management, Engineering, or a comparable discipline.
Professional Experience:
• Preferably professional experience in Information Security, Data Protection, IT Governance, Enterprise Architecture, Application Management, Digital Transformation, Risk Management, Compliance, or a related field, ideally in an international environment.
• We also welcome candidates with a strong IT, technology, or business background and an interest in developing expertise in Information Security and Data Protection.
Information Security, Data Protection & Technology Expertise:
• Knowledge of Information Security and Data Protection principles, or experience in the definition, design, implementation, operation, or governance of IT applications and platforms.
• Ability to understand business and technology environments and translate business, security, privacy, regulatory, and technical requirements into practical and effective solutions.
Governance, Risk & Compliance:
• Experience in identifying, assessing, and mitigating business, technology, security, privacy, or compliance risks.
• Ability to provide transparent assessments and pragmatic recommendations that support informed business decisions.
• Experience supporting audits, assessments, compliance activities, or governance framew
Apply on employer site ↗