Information Security & Data Protection Expert (f/m/div.)

Bosch Group; Braga; On-site; EUR 65,000 - 90,000; Full time

Benefits offered by this job

Free transport from Porto

Discounts on Bosch products

Training and certifications

Career progression opportunities

Sports and health activities

On-site medical office & social staff

Job summary

Bosch Group in Portugal seeks an Information Security & Data Protection Expert to join the Governance team for Corporate & Service Areas. In this second-line role, you will advise on Security and Data Protection, support governance setup, assess risks, audits, and monitoring, and track remediation with independent guidance while ownership remains with local entities.

You will produce dashboards and reports, help develop global policies, and collaborate across regions to strengthen security,

Qualifications

• University degree in Information Security, Computer Science, Information Systems, Business Administration, Law, Risk Management, Engineering, or a comparable discipline.
• Experience in Information Security, Data Protection, IT Governance, Enterprise Architecture, Application Management, Digital Transformation, Risk Management, Compliance, or a related field, ideally international.
• Knowledge of Information Security and Data Protection principles; ability to translate requirements into practical solutions.
• Experience supporting audits, assessments, governance frameworks; ability to work with stakeholders across regions.

Responsibilities

• Serve as a trusted advisor on Information Security and Data Protection matters; provide risk-based guidance to support compliant and secure operations.
• Support establishment and continuous improvement of governance structures; assist with risk assessments and controls.
• Conduct and oversee risk assessments; provide risk-based recommendations for management decisions.
• Perform audits and monitoring; accompany internal and external audits; identify control weaknesses and track remediation.
• Prepare risk and control dashboards, reports, and management information for governance transparency.
• Support development, maintenance, and rollout of global Information Security and Data Protection policies and controls.

Skills

Information Security

Data Protection

IT Governance

Risk Management

Compliance

Audit

Stakeholder Management

Communication

Education

University degree

Job description

Information Security & Data Protection Expert (f/m/div.)

• Full-time

The Bosch Group has more than 400 000 employees around the world, present in 60 countries, and we are proud to impact people’s lives and to work towards a more sustainable future.

Bosch Car Multimedia, S.A. belongs to the Automotive Electronics division and is focused on making the vehicles our third living space. About 3.600 associates are committed to develop and produce high quality technology that shape change in mobility worldwide. The company' success lies in its highly specialized and innovative team, and on the technological know-how which makes Bosch the leading supplier in the automotive market.

At Bosch, we shape the future by inventing high-quality technologies and services that spark enthusiasm and enrich people’s lives. Our promise to our associates is rock-solid: we grow together, we enjoy our work, and we inspire each other. Join in and feel the difference in mindsets, cultures, generations, identities and perspectives. Everyone should bring their authenticity and work together respectfully. Bosch is an employer that values diversity and equal opportunities. We welcome applications from people with disabilities and we can provide reasonable accommodations during the recruitment process and in the performance of professional activity. By including everyone and ensuring equal opportunities we unleash our full potential.

Are you passionate about Information Security, Data Protection, or technology and motivated by helping the business operate securely and compliantly? Do you enjoy working at the intersection of governance, risk management, technology, and legal requirements while supporting projects and stakeholders in an increasingly digital and data-driven world?

We are seeking an Information Security & Data Protection Expert to join our Governance team for Corporate & Service Areas. In this second-line governance role, you will advise organizational entities on behalf of the Group DPO, support the development of their governance setup, assess risks and controls, perform audits and monitoring activities, and track remediation. You will provide independent, risk-based guidance and transparency while operational ownership and implementation remain with the responsible organizational entities.

Your contribution to something big:

• Information Security & Data Protection Advisory: Serve as a trusted advisor to business departments, projects, and associates on Information Security and Data Protection matters. Provide practical and risk-based guidance to support compliant and secure business operations.
  
• Governance Advisory & Organizational Enablement: Consult organizational entities of the Bosch Group on behalf of the Group DPO and support the establishment and continuous improvement of Information Security and Data Protection governance structures.
  
• Risk & Control Oversight: Conduct and maintain group-wide Information Security and Data Protection risk assessments and provide transparent, risk-based recommendations for informed management decisions.
  
• Auditing, Monitoring & Assurance: Perform audits and ongoing monitoring activities, prepare and accompany internal and external audits, identify control weaknesses and governance gaps, and track remediation measures through to successful closure.
  
• Governance Reporting & Management Information: Prepare risk and control dashboards, reports, and management information to provide transparency on governance effectiveness, risk exposure, and improvement opportunities.
  
• Policy & Control Framework Development: Support the development, maintenance, and rollout of global Information Security and Data Protection policies, governance requirements, and control procedures.

What distinguishes you:

Education: University degree in Information Security, Computer Science, Information Systems, Business Administration, Law, Risk Management, Engineering, or a comparable discipline.

Professional Experience:

• Preferably professional experience in Information Security, Data Protection, IT Governance, Enterprise Architecture, Application Management, Digital Transformation, Risk Management, Compliance, or a related field, ideally in an international environment.
• We also welcome candidates with a strong IT, technology, or business background and an interest in developing expertise in Information Security and Data Protection.
• Knowledge of Information Security and Data Protection principles, or experience in the definition, design, implementation, operation, or governance of IT applications and platforms.
• Ability to understand business and technology environments and translate business, security, privacy, regulatory, and technical requirements into practical and effective solutions.
• Experience in identifying, assessing, and mitigating business, technology, security, privacy, or compliance risks.
• Ability to provide transparent assessments and pragmatic recommendations that support informed business decisions.
• Experience supporting audits, assessments, compliance activities, or governance frameworks is an advantage.

Stakeholder Management & Communication:

• Strong consulting, communication, and stakeholder management skills.
• Ability to explain technical, legal, and governance topics in a pragmatic and understandable way and collaborate effectively across organizational boundaries.
• Strong collaboration skills and the ability to work effectively across functions, regions, and cultures. Comfortable building trusted relationships with business and technical stakeholders.

Personality:

• Structured, analytical, and solution-oriented working style; strong ownership and personal initiative; pragmatic and risk-based mindset; collaborative communication style; and a high degree of customer orientation.

Language Skills: Business fluent in written and spoken English. Additional language skills, particularly German, are an advantage.

Please note that your application for this position may be subject to a Pre-Employment Screening (PES). The PES process must be carried out for particularly sensitive positions to reduce security risks.
For more information about the procedure, please refer to this link .

The PES process is subject to our privacy policies.

Exchange with colleagues around the world

Medical office (psychology and general clinic) & Social Services Officeon site

Training opportunities (p.e., technical training, foreign languages training) & certifications

Opportunities for career progression and continuous professional development

Access to great discounts in partnerships and Bosch products

Sports and health related activities

Great access to public transports

Free transport from Porto

Success stories don´t just happen. They are made...