Information & Cyber Security Expert

Home | Bosch Home Comfort Group Key Responsibilities: - Information & Cyber Security: - Representing the role of the Cyber Security Manager for assigned projects - Main contact for the assigned sites or IT applications for the deployment of Information & Cyber Security standards. - Planning and performance of Cyber Security Assessments (e.g. Security Audits, Risk Analysis). - Delivery of standardized Cyber Security & IT Compliance services (e.g. Vulnerability Management, review of Operator Self-Checks, coordination of PenTests, Awareness Sessions, training, templates) for IT compliance partners, IT owners, managers and associates. - Determination and reporting of the Cyber Security status to stakeholders (e.g. Plant Managers, IT owners). - IT Risk & Compliance Management: - Consulting and support in the implementation of sustainable and effective measures for risk mitigation and IT Compliance. - Responsible for the inventory and appropriate follow-up of risks and respective measures to ensure timely closure of agreed-upon measures. Support in the establishment of a positive IT risk-aware culture. - Bachelor's degree in Information Technology, Computer Science, Information Security, or a related field. - Total 10 years of experience, 3+ years of progressive experience in Information Security, Cyber Security for Enterprise IT, IT Risk Analysis or Audits. - Proven experience in conducting comprehensive Cyber Security assessments or IT audits. - Understanding of common IT control frameworks (e.g. ISO 27001, CIS) or Bosch IT regulatory requirements (e.g. CD09000, CD02900). - Stakeholder-driven attitude to consult and support IT owners and head of departments - Systematic approach as well as strong analytical and problem-solving skills with meticulous attention to detail. - Advanced written and verbal communication skills, with the ability to effectively articulate technical concepts to diverse audiences. - Ability to work independently and as part of a global team in a fast-paced, dynamic environment. Strong presentation and training delivery skills. Relevant industry certifications such as ISO 27001 Lead Auditor, CRISC, CISSP, CISM, CISA, or equivalent.