Information Security & Data Protection Expert (f/m/div.)

Are you passionate about Information Security, Data Protection, or technology and motivated by helping the business operate securely and compliantly? Do you enjoy working at the intersection of governance, risk management, technology, and legal requirements while supporting projects and stakeholders in an increasingly digital and data-driven world?

We are seeking an Information Security & Data Protection Expert to join our Governance team for Corporate & Service Areas. In this second-line governance role, you will advise organizational entities on behalf of the Group DPO, support the development of their governance setup, assess risks and controls, perform audits and monitoring activities, and track remediation. You will provide independent, risk-based guidance and transparency while operational ownership and implementation remain with the responsible organizational entities.

Your contribution to something big:

• Information Security & Data Protection Advisory: Serve as a trusted advisor to business departments, projects, and associates on Information Security and Data Protection matters. Provide practical and risk-based guidance to support compliant and secure business operations.

 
• Governance Advisory & Organizational Enablement: Consult organizational entities of the Bosch Group on behalf of the Group DPO and support the establishment and continuous improvement of Information Security and Data Protection governance structures.

 
• Risk & Control Oversight: Conduct and maintain group-wide Information Security and Data Protection risk assessments and provide transparent, risk-based recommendations for informed management decisions.

 
• Auditing, Monitoring & Assurance: Perform audits and ongoing monitoring activities, prepare and accompany internal and external audits, identify control weaknesses and governance gaps, and track remediation measures through to successful closure.

 
• Governance Reporting & Management Information: Prepare risk and control dashboards, reports, and management information to provide transparency on governance effectiveness, risk exposure, and improvement opportunities.

 
• Policy & Control Framework Development: Support the development, maintenance, and rollout of global Information Security and Data Protection policies, governance requirements, and control procedures.

Function: Legal
Experience Level: Associate