Senior Information Security & Data Protection Expert (f/m/div.)

The Bosch Group has more than 400 000 employees around the world, present in 60 countries, and we are proud to impact people’s lives and to work towards a more sustainable future.

Bosch Car Multimedia, S.A. belongs to the Automotive Electronics division and is focused on making the vehicles our third living space. About 3.600 associates are committed to develop and produce high quality technology that shape change in mobility worldwide. The company' success lies in its highly specialized and innovative team, and on the technological know-how which makes Bosch the leading supplier in the automotive market.

At Bosch, we shape the future by inventing high-quality technologies and services that spark enthusiasm and enrich people’s lives. Our promise to our associates is rock-solid: we grow together, we enjoy our work, and we inspire each other. Join in and feel the difference in mindsets, cultures, generations, identities and perspectives. Everyone should bring their authenticity and work together respectfully. Bosch is an employer that values diversity and equal opportunities. We welcome applications from people with disabilities and we can provide reasonable accommodations during the recruitment process and in the performance of professional activity. By including everyone and ensuring equal opportunities we unleash our full potential.

Are you an experienced Information Security and Data Protection Governance professional who can shape governance models, challenge complex risk decisions, and strengthen oversight across a global organization?

We are seeking a Senior Information Security & Data Protection Expert to join our Governance team for Corporate & Service Areas. In this senior second-line governance role, you will advise organizational entities and senior stakeholders on behalf of the Group DPO, lead the development of governance setups, steer group-wide risk, audit, and monitoring activities, and turn cross-entity findings into management insight and improvements to the control framework.

Your contribution to something big:

- Strategic Governance Advisory & Organizational Enablement: Advise organizational entities of the Bosch Group on behalf of the Group DPO and lead the development and continuous improvement of Information Security and Data Protection governance structures, accountabilities, and oversight mechanisms.

- Enterprise Risk & Control Oversight: Lead and continuously enhance group-wide Information Security and Data Protection risk assessments, identify emerging and systemic risks, and provide risk-based recommendations to support management decision-making.

Audit, Monitoring & Assurance Leadership: Lead audits and ongoing monitoring activities across Bosch entities, coordinate audit preparation and follow-up, monitor Information Security and Data Protection relevant audit findings, including findings of the third line of defense, and oversee sustainable remediation through to closure.

- Governance Reporting & Management Transparency: Drive the preparation of risk and control dashboards, reports, and management information, ensuring transparency on governance effectiveness, risk exposure, and improvement opportunities for senior stakeholders.

- Policy & Control Framework Development: Shape the development, maintenance, and global rollout of Information Security and Data Protection policies, governance requirements, and control procedures, ensuring alignment with regulatory and business needs.

- Governance Excellence & Continuous Improvement: Drive the continuous enhancement of governance processes, control frameworks, and oversight mechanisms by translating lessons learned from audits, monitoring activities, and risk assessments into sustainable governance improvements.

What distinguishes you:

- Professional Experience: Several years of professional experience in Information Security, Data Protection, IT Governance, Enterprise Architecture, Application Management, Digital Transformation, Risk Management, Compliance, or a related field, ideally in an international environment.

- Information Security, Data Protection & Technology Expertise: Strong expertise in IS & DP, or substantial experience in the definition, design, implementation, or governance of complex IT applications and platforms. Ability to understand complex business and technology environments, assess associated opportunities and risks, and translate business, security, privacy, regulatory, and technical requirements into practical and effective solutions.

- Governance, Risk & Compliance: Experience in identifying, assessing, and mitigating business, technology, security, privacy, or compliance risks and providing recommendations that enable informed business decisions. Experience supporting or coordinating audits, assessments, investigations, compliance activities, or the implementation of effective management systems, governance frameworks, or control environments is an advantage.

- Stakeholder Management & Communication: Excellent consulting, communication, and stakeholder management skills. Ability to explain complex technical, legal, and governance topics in a pragmatic and understandable way and influence decisions across organizational boundaries.

- Collaboration & Influence: Strong collaboration skills with a proven ability to coordinate activities across functions, regions, and cultures. Comfortable working in complex organizational environments and building trusted relationships with business and technical stakeholders.

- Personality: Structured, analytical, and solution-oriented working style, strong ownership and personal initiative, pragmatic and risk-based mindset, convincing and collaborative communicator and high degree of customer orientation.

- Education: University degree in Information Security, Computer Science, Information Systems, Business Administration, Law, Risk Management, Engineering, or a comparable discipline.

- Language Skills: Business fluent in written and spoken English. Additional language skills, particularly German, are an advantage .

Please note that your application for this position may be subject to a Pre-Employment Screening (PES). The PES process must be carried out for particularly sensitive positions to reduce security risks.

For more information about the procedure, please refer to this link.

The PES process is subject to our privacy policies.

Work #LikeABosch includes:

Flexible work conditions

Hybrid work system

Exchange with colleagues around the world

Health insurance

Medical office (psychology and general clinic) & Social Services Office on site

Training opportunities (p.e., technical training, foreign languages training) & certifications

Opportunities for career progression and continuous professional development

Access to great discounts in partnerships and Bosch products

Sports and health related activities

Great access to public transports

Free transport from Porto

Flexible benefits platform

Free parking lot

Canteen

Success stories don´t just happen. They are made...

Make it happen! We are looking forward to your application!