Mobile Governance, Risk, Compliance (GRC) Lead (f/m)

Lodzplus; Łódź; On-site; PLN 180,000 - 240,000; Full time

Job summary

Bosch in Poland seeks a Mobile GRC Lead to oversee security and regulatory matters within the global Smart Mobile Devices team, spanning smartphones to wearables. You will interpret directives, manage risk, and ensure the mobile fleet remains resilient against threats, coordinating with Cybersecurity, Legal, and Product teams.

This governance role requires leadership, risk management, and regulatory acumen.

Responsibilities

• Strategic Security Liaison: main interface between the Smart Mobile Devices team and central functions, including Cybersecurity, Vulnerability Management, Data Privacy, Quality Management, and Legal.
• Mobile Security Committee Leadership: chair and host the monthly Mobile Security Committee, drive cross-functional alignment and ensure action items are addressed by stakeholders from cybersecurity and legal teams.
• Risk Management & Governance: maintain and evolve IT risk registers for the Smart Mobile Devices portfolio, identify, document, and track risks with mitigations.
• Vulnerability & Patch Management: lead the vulnerability lifecycle for mobile hardware and OS, coordinate with Product Managers to deploy critical patches and meet security baselines.
• Audit & Assessment Oversight: lead annual IT self assessments for all products & services, coordinate with internal/external auditors to ensure compliance with global standards.
• Penetration Testing: define scope and lead regular penetration tests for mobile apps and device configurations, manage remediation of discovered flaws.
• Regulatory Interpretation & Consultation: review and interpret GDPR, NIST, ISO 27001 directives, translating them into technical requirements and policies.
• Stakeholder Management: engage with cross-functional stakeholders, facilitate discussions to reach consensus on security trade-offs.

Job description

Company Description

At Bosch, we shape the future by inventing high-quality technologies and services that spark enthusiasm and enrich people's lives. Our promise to our associates is rock-solid: we grow together, we enjoy our work, and we inspire each other.

Job Description

As the Mobile GRC Lead, the role will serve as the primary authority and central point of contact for all security and regulatory matters within the global Smart Mobile Devices team. Role will oversee the security posture of a diverse and critical ecosystem, including smartphones, tablets (iOS/Android), rugged handheld scanners, RFID devices, AR/VR headsets, and managed wearables.

This is a high-impact, high-visibility governance role that bridges the gap between technical device management and corporate legal/security mandates. You will be responsible for interpreting complex central directives, managing the risk landscape, and ensuring that our global mobile fleet remains resilient against emerging threats.

Key Responsibilities

• Strategic Security Liaison: Serve as the main interface between the Smart Mobile Devices team and central functions, including Cybersecurity, Vulnerability Management, Data Privacy, Quality Management, and Legal.


• Mobile Security Committee Leadership: Chair and host the monthly Mobile Security Committee. This includes setting the agenda, driving cross-functional alignment, and ensuring action items are addressed by stakeholders from cybersecurity and legal teams.


• Risk Management & Governance: Maintain and evolve the IT Risk Registers for the Smart Mobile Devices portfolio. Identify, document, and track risks, ensuring mitigation strategies are effectively implemented in line with corporate IT Risk Management frameworks.


• Vulnerability & Patch Management: Lead the vulnerability lifecycle for mobile hardware and OS. Coordinate with Product Managers to ensure critical patches are deployed and security baselines (iOS/Android/Rugged) are met.


• Audit & Assessment Oversight: Lead the annual IT self assessments for all products & services in the Smart Mobile Devices portfolio. Coordinate with internal and external auditors to ensure compliance with global standards.


• Penetration Testing: Define the scope and lead the execution of regular penetration tests for mobile applications and device configurations, managing the remediation of discovered flaws.


• Regulatory Interpretation & Consultation: Review and interpret "legalese" central directives and global regulations (e.g., GDPR, NIST, ISO 27001), translating them into technical requirements and actionable policies for the Smart Mobile Devices team.


• Stakeholder Management: Engage with strongly opinionated stakeholders across different business units. Facilitate intense technical and strategic discussions to reach a consensus on security trade-offs.