Mobile Governance, Risk, Compliance (GRC) Lead (f/m)

Bosch is a company inventing high-quality technologies and services. This role is part of the Bosch Digital division within Robert Bosch Sp. z o.o., focused on Smart Mobile Devices in an enterprise environment.

• Minimum 5 years experience in IT Governance, IT Security, or IT Compliance in enterprise environments.
• Strong knowledge of Mobile Device Management (MDM/UEM) concepts and mobile security frameworks, e.g., Intune, Workspace ONE, SOTI MobiControl.
• Experience managing IT Risk Registers and conducting IT assessments or audits.
• Solid understanding of vulnerability management tools and penetration testing lifecycle.
• Fluency in English (written and verbal), able to draft formal security reports and communicate complex risks.
• Ability to work under pressure, meet compliance deadlines, and handle challenging stakeholder discussions.

Preferred Qualifications:

• Proficiency in German (written and verbal).
• Certifications such as CISM, CISA, CISSP, or CRISC.
• Experience with Project Management and Agile processes.

• Serve as strategic security liaison between Smart Mobile Devices team and central functions like Cybersecurity, Vulnerability Management, Data Privacy, Quality Management, and Legal.
• Chair and host the monthly Mobile Security Committee, setting agenda and driving cross-functional alignment.
• Maintain and evolve IT Risk Registers, identify and track risks, ensure mitigation per corporate IT Risk Management frameworks.
• Lead vulnerability lifecycle management for mobile devices and OS, coordinate patch deployment ensuring security baselines.
• Lead annual IT self-assessments and coordinate with auditors to ensure compliance with global standards.
• Define scope and lead execution of regular penetration tests for mobile applications and devices, managing remediation.
• Review and interpret global regulations (GDPR, NIST, ISO 27001) translating them into technical requirements and policies.
• Engage with stakeholders to facilitate technical and strategic security discussions to reach consensus on trade-offs.