Information Security & Data Protection Expert (f/m/div.)

The Bosch Group has more than 400 000 employees around the world, present in 60 countries, and we are proud to impact people’s lives and to work towards a more sustainable future.

Bosch Car Multimedia, S.A. belongs to the Automotive Electronics division and is focused on making the vehicles our third living space. About 3.600 associates are committed to develop and produce high quality technology that shape change in mobility worldwide. The company' success lies in its highly specialized and innovative team, and on the technological know-how which makes Bosch the leading supplier in the automotive market. 

At Bosch, we shape the future by inventing high-quality technologies and services that spark enthusiasm and enrich people’s lives. Our promise to our associates is rock-solid: we grow together, we enjoy our work, and we inspire each other. Join in and feel the difference in mindsets, cultures, generations, identities and perspectives. Everyone should bring their authenticity and work together respectfully. Bosch is an employer that values diversity and equal opportunities. We welcome applications from people with disabilities and we can provide reasonable accommodations during the recruitment process and in the performance of professional activity. By including everyone and ensuring equal opportunities we unleash our full potential.

Are you passionate about Information Security, Data Protection, or technology and motivated by helping the business operate securely and compliantly? Do you enjoy working at the intersection of governance, risk management, technology, and legal requirements while supporting projects and stakeholders in an increasingly digital and data-driven world?

We are seeking anInformation Security & Data Protection Expert to join ourGovernance team for Corporate & Service Areas. In this second-line governance role, you will advise organizational entities on behalf of the Group DPO, support the development of their governance setup, assess risks and controls, perform audits and monitoring activities, and track remediation. You will provide independent, risk-based guidance and transparency while operational ownership and implementation remain with the responsible organizational entities.

Your contribution to something big:

• Information Security & Data Protection Advisory: Serve as a trusted advisor to business departments, projects, and associates on Information Security and Data Protection matters. Provide practical and risk-based guidance to support compliant and secure business operations.
   
• Governance Advisory & Organizational Enablement: Consult organizational entities of the Bosch Group on behalf of the Group DPO and support the establishment and continuous improvement of Information Security and Data Protection governance structures.
   
• Risk & Control Oversight:Conduct and maintain group-wide Information Security and Data Protection risk assessments and provide transparent, risk-based recommendations for informed management decisions.
   
• Auditing, Monitoring & Assurance: Perform audits and ongoing monitoring activities, prepare and accompany internal and external audits, identify control weaknesses and governance gaps, and track remediation measures through to successful closure.
   
• Governance Reporting & Management Information:Prepare risk and control dashboards, reports, and management information to provide transparency on governance effectiveness, risk exposure, and improvement opportunities.
   
• Policy & Control Framework Development:Support the development, maintenance, and rollout of global Information Security and Data Protection policies, governance requirements, and control procedures.

What distinguishes you:

Education:University degree in Information Security, Computer Science, Information Systems, Business Administration, Law, Risk Management, Engineering, or a comparable discipline.

Professional Experience:

• Preferably professional experience in Information Security, Data Protection, IT Governance, Enterprise Architecture, Application Management, Digital Transformation, Risk Management, Compliance, or a related field, ideally in an international environment.
• We also welcome candidates with a strong IT, technology, or business background and an interest in developing expertise in Information Security and Data Protection.

Information Security, Data Protection & Technology Expertise:

• Knowledge of Information Security and Data Protection principles, or experience in the definition, design, implementation, operation, or governance of IT applications and platforms.
• Ability to understand business and technology environments and translate business, security, privacy, regulatory, and technical requirements into practical and effective solutions.

Governance, Risk & Compliance:

• Experience in identifying, assessing, and mitigating business, technology, security, privacy, or compliance risks.
• Ability to provide transparent assessments and pragmatic recommendations that support informed business decisions.
• Experience supporting audits, assessments, compliance activities, or governance frameworks is an advantage.

Stakeholder Management & Communication:

• Strong consulting, communication, and stakeholder management skills.
• Ability to explain technical, legal, and governance topics in a pragmatic and understandable way and collaborate effectively across organizational boundaries.

Collaboration & Influence:

• Strong collaboration skills and the ability to work effectively across functions, regions, and cultures. Comfortable building trusted relationships with business and technical stakeholders.

Personality:

• Structured, analytical, and solution-oriented working style; strong ownership and personal initiative; pragmatic and risk-based mindset; collaborative communication style; and a high degree of customer orientation.

• Language Skills:Business fluent in written and spoken English. Additional language skills, particularly German, are an advantage.

Please note that your application for this position may be subject to a Pre-Employment Screening (PES). The PES process must be carried out for particularly sensitive positions to reduce security risks.
For more information about the procedure, please refer to thislink.

The PES process is subject to our privacy policies.

Work #LikeABosch includes:

⚖️ Flexible work conditions

🔀 Hybrid work system

🌐 Exchange with colleagues around the world

🛡️  Health insurance

🧑‍⚕️  Medical office (psychology and general clinic) & Social Services Office on site

📚 Training opportunities (p.e., technical training, foreign languages training) & certifications

📈 Opportunities for career progression and continuous professional development

💲 Access to great discounts in partnerships and Bosch products

🏋️ Sports and health related activities

🚉 Great access to public transports

🚌 Free transport from Porto

💰 Flexible benefits platform

🅿️ Free parking lot

🍽️ Canteen

Success stories don´t just happen. They are made...

Make it happen! We are looking forward to your application!