Senior Information Security & Data Protection Expert

Job Description

Are you an experienced Information Security and Data Protection Governance professional who can shape governance models, challenge complex risk decisions, and strengthen oversight across a global organization?

We are seeking a Senior Information Security & Data Protection Expert to join our Governance team for Corporate & Service Areas. In this senior second-line governance role, you will advise organizational entities and senior stakeholders on behalf of the Group DPO, lead the development of governance setups, steer group-wide risk, audit, and monitoring activities, and turn cross-entity findings into management insight and improvements to the control framework.

Your contribution to something big:

- Strategic Governance Advisory & Organizational Enablement: Advise organizational entities of the Bosch Group on behalf of the Group DPO and lead the development and continuous improvement of Information Security and Data Protection governance structures, accountabilities, and oversight mechanisms.

- Enterprise Risk & Control Oversight: Lead and continuously enhance group-wide Information Security and Data Protection risk assessments, identify emerging and systemic risks, and provide risk-based recommendations to support management decision-making.

Audit, Monitoring & Assurance Leadership: Lead audits and ongoing monitoring activities across Bosch entities, coordinate audit preparation and follow-up, monitor Information Security and Data Protection relevant audit findings, including findings of the third line of defense, and oversee sustainable remediation through to closure.

- Governance Reporting & Management Transparency: Drive the preparation of risk and control dashboards, reports, and management information, ensuring transparency on governance effectiveness, risk exposure, and improvement opportunities for senior stakeholders.

- Policy & Control Framework Development: Shape the development, maintenance, and global rollout of Information Security and Data Protection policies, governance requirements, and control procedures, ensuring alignment with regulatory and business needs.

- Governance Excellence & Continuous Improvement: Drive the continuous enhancement of governance processes, control frameworks, and oversight mechanisms by translating lessons learned from audits, monitoring activities, and risk assessments into sustainable governance improvements.

Qualifications

What distinguishes you:

- Professional Experience: Several years of professional experience in Information Security, Data Protection, IT Governance, Enterprise Architecture, Application Management, Digital Transformation, Risk Management, Compliance, or a related field, ideally in an international environment.

- Information Security, Data Protection & Technology Expertise: Strong expertise in IS & DP, or substantial experience in the definition, design, implementation, or governance of complex IT applications and platforms. Ability to understand complex business and technology environments, assess associated opportunities and risks, and translate business, security, privacy, regulatory, and technical requirements into practical and effective solutions.

- Governance, Risk & Compliance: Experience in identifying, assessing, and mitigating business, technology, security, privacy, or compliance risks and providing recommendations that enable informed business decisions. Experience supporting or coordinating audits, assessments, investigations, compliance activities, or the implementation of effective management systems, governance frameworks, or control environments is an advantage.

- Stakeholder Management & Communication: Excellent consulting, communication, and stakeholder management skills. Ability to explain complex technical, legal, and governance topics in a pragmatic and understandable way and influence decisions across organizational boundaries.

- Collaboration & Influence: Strong collaboration skills with a proven ability to coordinate activities across functions, regions, and cultures. Comfortable working in complex organizational environments and building trusted relationships with business and technical stakeholders.

- Personality: Structured, analytical, and solution-oriented working style, strong ownership and personal initiative, pragmatic and risk-based mindset, convincing and collaborative communicator and high degree of customer orientation.

- Education: University degree in Information Security, Computer Science, Information Systems, Business Administration, Law, Risk Management, Engineering, or a comparable discipline.

- Language Skills: Business fluent in written and spoken English. Additional language skills, particularly German, are an advantage.

Additional Information

Please note that your application for this position may be subject to a Pre-Employment Screening (PES). The PES process must be carried out for particularly sensitive positions to reduce security risks.
For more information about the procedure, please refer to this link.

The PES process is subject to our privacy policies.

Work #LikeABosch includes:

⚖️ Flexible work conditions

🔀 Hybrid work system

🌐 Exchange with colleagues around the world

🛡️  Health insurance

🧑‍⚕️  Medical office (psychology and general clinic) & Social Services Office on site

📚 Training opportunities (p.e., technical training, foreign languages training) & certifications

📈 Opportunities for career progression and continuous professional development

💲 Access to great discounts in partnerships and Bosch products

🏋️ Sports and health related activities

🚉 Great access to public transports

🚌 Free transport from Porto

💰 Flexible benefits platform

🅿️ Free parking lot

🍽️ Canteen

Success stories don´t just happen. They are made...

Make it happen! We are looking forward to your application!

Global Salary Level: SL1