Mobile Governance, Risk, Compliance (GRC) Lead (f/m)

Bosch Group; Łódź; Hybride; PLN 180 000 - 240 000; Plein temps

Avantages offerts par ce poste

Employment Contract

Competitive salary + annual bonus

Hybrid work with flexible workinghours

Referral Bonus Program

Copyright costs for IT employees

Résumé du poste

Bosch Group is seeking a Mobile GRC Lead to act as the central authority for security and regulatory matters across its global Smart Mobile Devices portfolio. You will oversee risk management, vulnerability lifecycles, audits, and compliance with standards such as GDPR, NIST, and ISO 27001.

The role requires leadership of security committees, cross-functional liaison with Cybersecurity and Legal, and the ability to translate complex directives into actionable policies while maintaining

Qualifications

• 5+ years in IT governance, IT security, or IT compliance within an enterprise
• Experience with MDM/UEM concepts (Intune, Workspace ONE, SOTI MobiControl) and mobile security frameworks
• Proven governance and risk management experience with IT risk registers and formal assessments
• Solid understanding of vulnerability management tools and penetration testing lifecycle
• Excellent written and verbal English; ability to present security risks to non-technical audiences
• Resilience under pressure and ability to meet strict compliance deadlines

Responsabilités

• Strategic Security Liaison with the Smart Mobile Devices team and central functions (Cybersecurity, Data Privacy, Legal).
• Lead Mobile Security Committee meetings, set agendas, drive cross-functional alignment, track action items.
• Maintain and evolve IT Risk Registers for the Smart Mobile Devices portfolio; document and mitigate risks.
• Oversee vulnerability and patch management for mobile hardware and OS; ensure security baselines.
• Lead annual IT self assessments and coordinate with auditors for compliance with global standards.
• Define scope and lead penetration testing for mobile apps and device configurations; drive remediation.
• Interpret regulatory directives (GDPR, NIST, ISO 27001) into technical requirements and policies.
• Engage with stakeholders across business units to reach security consensus.

Connaissances

IT governance

IT security

IT compliance

MDM/UEM

Vulnerability management

English fluency

Stakeholder management

Outils

Intune

Workspace ONE

SOTI MobiControl

Description du poste

Mobile Governance, Risk, Compliance (GRC) Lead (f/m)

• Full-time

At Bosch, we shape the future by inventing high-quality technologies and services that spark enthusiasm and enrich people's lives. Our promise to our associates is rock-solid: we grow together, we enjoy our work, and we inspire each other.

As the Mobile GRC Lead, the role will serve as the primary authority and central point of contact for all security and regulatory matters within the global Smart Mobile Devices team. Role will oversee the security posture of a diverse and critical ecosystem, including smartphones, tablets (iOS/Android), rugged handheld scanners, RFID devices, AR/VR headsets, and managed wearables. This is a high-impact, high-visibility governance role that bridges the gap between technical device management and corporate legal/security mandates. You will be responsible for interpreting complex central directives, managing the risk landscape, and ensuring that our global mobile fleet remains resilient against emerging threats.

Key Responsibilities

• Strategic Security Liaison: Serve as the main interface between the Smart Mobile Devices team and central functions, including Cybersecurity, Vulnerability Management, Data Privacy, Quality Management, and Legal.
• Mobile Security Committee Leadership: Chair and host the monthly Mobile Security Committee. This includes setting the agenda, driving cross-functional alignment, and ensuring action items are addressed by stakeholders from cybersecurity and legal teams.
• Risk Management & Governance: Maintain and evolve the IT Risk Registers for the Smart Mobile Devices portfolio. Identify, document, and track risks, ensuring mitigation strategies are effectively implemented in line with corporate IT Risk Management frameworks.
• Vulnerability & Patch Management: Lead the vulnerability lifecycle for mobile hardware and OS. Coordinate with Product Managers to ensure critical patches are deployed and security baselines (iOS/Android/Rugged) are met.
• Audit & Assessment Oversight: Lead the annual IT self assessments for all products & services in the Smart Mobile Devices portfolio. Coordinate with internal and external auditors to ensure compliance with global standards.
• Penetration Testing: Define the scope and lead the execution of regular penetration tests for mobile applications and device configurations, managing the remediation of discovered flaws.
• Regulatory Interpretation & Consultation: Review and interpret “legalese” central directives and global regulations (e.g., GDPR, NIST, ISO 27001), translating them into technical requirements and actionable policies for the Smart Mobile Devices team.
• Stakeholder Management: Engage with strongly opinionated stakeholders across different business units. Facilitate intense technical and strategic discussions to reach a consensus on security trade-offs.

Required Qualifications:

• Experience: 5+ years of experience in IT Governance, IT Security, or IT Compliance, specifically within an enterprise environment.
• MDM Knowledge: Strong familiarity with Mobile Device Management (MDM/UEM) concepts (e.g., Intune, Workspace ONE, SOTI MobiControl) and mobile security frameworks.
• Governance & Risk: Proven track record in managing IT Risk Registers and conducting formal IT assessments or audits.
• Technical Proficiency: Solid understanding of vulnerability management tools and the lifecycle of penetration testing.
• Communication: Fluency in English (written and verbal) is mandatory. You must be able to draft formal security reports and communicate complex technical risks to non-technical legal/business partners.
• Resilience: Ability to work under pressure, meet tight compliance deadlines, and navigate challenging discussions with senior stakeholders.

Preferred Qualifications:

• Language: Proficiency in German (written/verbal) is a strong plus.
• Certifications: CISM, CISA, CISSP, or CRISC certifications.
• Project Management / Agile processes

Bosch’s culture of innovation and digital transformation offers you a fantastic platform to grow your skills and enhance your network. We are dedicated to building a warm, open, transparent, and inclusive work environment for all.

• EmploymentContract
• Competitive salary + annual bonus
• Hybrid work with flexible working hours
• Referral Bonus Program
• Copyright costs for IT employees

Grow LikeABosch:

• Complex environment of working, professional support and possibility to share knowledge and best practices
• Ongoing development opportunities in a multinational environment
• Broad access to professional trainings (incl. language courses), conferences and webinars
• Private medical care and life insurance
• Cafeteria System with multiple benefits (incl. MultiSport, shopping vouchers, cinematickets, etc.)
• Prepaid Lunch Card
• Number of benefits for families (for instance summer camps for kids)
• Non-working day on the 31st of December