Senior Information Security & Data Protection Expert (f/m/div.)

Boschgroup; Braga; On-site; EUR 60,000 - 90,000; Full time

Job summary

Boschgroup seeks a Senior Information Security & Data Protection Expert to join the Governance team for Corporate & Service Areas. In this senior second-line role, you will advise entities on behalf of the Group DPO, lead governance development, and steer risk, audit, and monitoring activities across the organization.

You will translate findings into improvements to the control framework, shape policies, and provide management reporting to senior stakeholders.

Qualifications

• Several years of professional experience in Information Security or Data Protection governance.
• Experience delivering governance, risk, and compliance in a global organization.
• Ability to translate legal, regulatory, and business requirements into practical security controls.
• Excellent consulting, communication, and stakeholder management skills.
• English fluency; German language skills are an advantage.

Responsibilities

• Advise organizational entities on behalf of the Group DPO and lead governance development.
• Lead group-wide Information Security and Data Protection risk assessments and monitoring activities.
• Coordinate audits and remediation tracking, including findings from third line of defense.
• Prepare risk and control dashboards, reports, and management information for senior stakeholders.
• Shape the development, maintenance, and rollout of information security and data protection policies and controls.

Skills

Information Security

Data Protection

Governance

Risk Management

Compliance

Stakeholder Management

Audit Monitoring

Education

University degree in Information Security or related field

Job description

Are you an experienced Information Security and Data Protection Governance professional who can shape governance models, challenge complex risk decisions, and strengthen oversight across a global organization? We are seeking a Senior Information Security & Data Protection Expert to join our Governance team for Corporate & Service Areas. In this senior second-line governance role, you will advise organizational entities and senior stakeholders on behalf of the Group DPO, lead the development of governance setups, steer group-wide risk, audit, and monitoring activities, and turn cross-entity findings into management insight and improvements to the control framework.

Your contribution to something big:

• Strategic Governance Advisory & Organizational Enablement: Advise organizational entities of the Bosch Group on behalf of the Group DPO and lead the development and continuous improvement of Information Security and Data Protection governance structures, accountabilities, and oversight mechanisms.
• Enterprise Risk & Control Oversight: Lead and continuously enhance group-wide Information Security and Data Protection risk assessments, identify emerging and systemic risks, and provide risk-based recommendations to support management decision-making.
• Audit, Monitoring & Assurance Leadership: Lead audits and ongoing monitoring activities across Bosch entities, coordinate audit preparation and follow-up, monitor Information Security and Data Protection relevant audit findings, including findings of the third line of defense, and oversee sustainable remediation through to closure.
• Governance Reporting & Management Transparency: Drive the preparation of risk and control dashboards, reports, and management information, ensuring transparency on governance effectiveness, risk exposure, and improvement opportunities for senior stakeholders.
• Policy & Control Framework Development: Shape the development, maintenance, and global rollout of Information Security and Data Protection policies, governance requirements, and control procedures, ensuring alignment with regulatory and business needs.
• Governance Excellence & Continuous Improvement: Drive the continuous enhancement of governance processes, control frameworks, and oversight mechanisms by translating lessons learned from audits, monitoring activities, and risk assessments into sustainable governance improvements.

What distinguishes you:

• Professional Experience: Several years of professional experience in Information Security, Data Protection, IT Governance, Enterprise Architecture, Application Management, Digital Transformation, Risk Management, Compliance, or a related field, ideally in an international environment.
• Information Security, Data Protection & Technology Expertise: Strong expertise in IS & DP, or substantial experience in the definition, design, implementation, or governance of complex IT applications and platforms. Ability to understand complex business and technology environments, assess associated opportunities and risks, and translate business, security, privacy, regulatory, and technical requirements into practical and effective solutions.
• Governance, Risk & Compliance: Experience in identifying, assessing, and mitigating business, technology, security, privacy, or compliance risks and providing recommendations that enable informed business decisions. Experience supporting or coordinating audits, assessments, investigations, compliance activities, or the implementation of effective management systems, governance frameworks, or control environments is an advantage.
• Stakeholder Management & Communication : Excellent consulting, communication, and stakeholder management skills. Ability to explain complex technical, legal, and governance topics in a pragmatic and understandable way and influence decisions across organizational boundaries.
• Collaboration & Influence: Strong collaboration skills with a proven ability to coordinate activities across functions, regions, and cultures. Comfortable working in complex organizational environments and building trusted relationships with business and technical stakeholders.
• Personality: Structured, analytical, and solution-oriented working style, strong ownership and personal initiative, pragmatic and risk-based mindset, convincing and collaborative communicator and high degree of customer orientation.
• Education: University degree in Information Security, Computer Science, Information Systems, Business Administration, Law, Risk Management, Engineering, or a comparable discipline.
• Language Skills: Business fluent in written and spoken English. Additional language skills, particularly German, are an advantage.

Please note that your application for this position may be subject to a Pre-Employment Screening (PES). The PES process must be carried out for particularly sensitive positions to reduce security risks.

For more information about the procedure, please refer to this link.

The PES process