Information & Cyber Security Expert_HC

Job Description

About the Role:

Bosch (RB) has acquired the Residential & Light Commercial (R&LC) business from Johnson Controls (JCI) and Johnson Controls-Hitachi (JCH). The integration of the acquired IT environment into the Bosch IT network is planned for completion by December 2029. Throughout this transition, it is crucial to maintain business continuity while also preparing for the Bosch organizational and network integration.

We are seeking a highly motivated and experienced Information & Cyber Security Experts for a pivotal role in the successful integration of our newly acquired R&LC business.

Key Responsibilities:

• Information & Cyber Security: • Representing the role of the Cyber Security Manager for assigned projects
• Main contact for the assigned sites or IT applications for the deployment of Information & Cyber Security standards.
• Planning and performance of Cyber Security Assessments (e.g. Security Audits, Risk Analysis).
• Delivery of standardized Cyber Security & IT Compliance services (e.g. Vulnerability Management, review of Operator Self-Checks, coordination of PenTests, Awareness Sessions, training, templates) for IT compliance partners, IT owners, managers and associates.
• Determination and reporting of the Cyber Security status to stakeholders (e.g. Plant Managers, IT owners).

• IT Risk & Compliance Management: • Consulting and support in the implementation of sustainable and effective measures for risk mitigation and IT Compliance.
• Responsible for the inventory and appropriate follow-up of risks and respective measures to ensure timely closure of agreed-upon measures.
• Support in the establishment of a positive IT risk-aware culture.

Qualifications

Required:

• Bachelor's degree in Information Technology, Computer Science, Information Security, or a related field.
• 3+ years of progressive experience in Information Security, Cyber Security for Enterprise IT, IT Risk Analysis or Audits.
• Proven experience in conducting comprehensive Cyber Security assessments or IT audits.
• Understanding of common IT control frameworks (e.g. ISO 27001, CIS) or Bosch IT regulatory requirements (e.g. CD09000, CD02900).
• Stakeholder-driven attitude to consult and support IT owners and head of departments
• Systematic approach as well as strong analytical and problem-solving skills with meticulous attention to detail.
• Advanced written and verbal communication skills, with the ability to effectively articulate technical concepts to diverse audiences.
• Ability to work independently and as part of a global team in a fast-paced, dynamic environment.
• Strong presentation and training delivery skills.

Preferred:

• Relevant industry certifications such as ISO 27001 Lead Auditor, CRISC, CISSP, CISM, CISA, or equivalent.