Bosch Group: Information Security & Data Protection Expert (f/m/div.) — Braga, Portugal

About Bosch Group

Bosch's India activities span mobility, industrial technology, consumer goods, and energy and building technology. Its employer description identifies engineering development, manufacturing and commercial operations within that range. The group operates through multiple Indian businesses, including activities in automotive systems, software and engineering, industrial technology and home appliances. This makes Bosch a collection of related technology businesses rather than a single product operation, with different entities serving different industrial and consumer applications.

The position and its setting

Bosch Group lists Information Security & Data Protection Expert (f/m/div.) in Braga, Portugal, under reference REF299335V. The details below separate the work described by the employer from essential conditions, preferred experience and practical preparation advice.

• Employment type: Full-time
• Employer listing date: 23 October 2026
• Contract type: According to Arrangement
• Legal Entity: Bosch Car Multimedia Portugal
• Brands: Bosch Group

Responsibilities and work described

• Are you passionate about Information Security, Data Protection, or technology and motivated by helping the business operate securely and compliantly?
• Do you enjoy working at the intersection of governance, risk management, technology, and legal requirements while supporting projects and stakeholders in an increasingly digital and data-driven world?
• We are seeking an Information Security & Data Protection Expert to join our Governance team for Corporate & Service Areas
• In this second-line governance role, you will advise organizational entities on behalf of the Group DPO, support the development of their governance setup, assess risks and controls, perform audits and monitoring activities, and track remediation
• Delivery: independent, risk-based guidance and transparency while operational ownership and implementation remain with the responsible organizational entities
• Your contribution to something big:
• Information Security & Data Protection Advisor y: Serve as a trusted advisor to business departments, projects, and associates on Information Security and Data Protection matters
• Delivery: practical and risk-based guidance to support compliant and secure business operations
• Governance Advisory & Organizational Enablement: Consult organizational entities of the Bosch Group on behalf of the Group DPO and support the establishment and continuous improvement of Information Security and Data Protection governance structures
• Risk & Control Oversight: Conduct and maintain group-wide Information Security and Data Protection risk assessments and provide transparent, risk-based recommendations for informed management decisions
• Auditing, Monitoring & Assurance: Perform audits and ongoing monitoring activities, prepare and accompany internal and external audits, identify control weaknesses and governance gaps, and track remediation measures through to successful closure
• Governance Reporting & Management Information: Prepare risk and control dashboards, reports, and management information to provide transparency on governance effectiveness, risk exposure, and improvement opportunities
• Policy & Control Framework Development: Support the development, maintenance, and rollout of global Information Security and Data Protection policies, governance requirements, and control procedures

Essential requirements and candidate background

• What distinguishes you:
• Education: University degree in Information Security, Computer Science, Information Systems, Business Administration, Law, Risk Management, Engineering, or a comparable discipline
• Professional
• Preferably professional experience in Information Security, Data Protection, IT Governance, Enterprise Architecture, Application Management, Digital Transformation, Risk Management, Compliance, or a related field, ideally in an international environment
• We also welcome candidates with a IT, technology, or business background and an interest in developing expertise in Information Security and Data Protection
• Information Security, Data Protection & Technology Expertise:
• Knowledge: Information Security and Data Protection principles, or experience in the definition, design, implementation, operation, or governance of IT applications and platforms
• Understand business and technology environments and translate business, security, privacy, regulatory, and technical requirements into practical and effective solutions
• Governance, Risk & Compliance:
• Experience: identifying, assessing, and mitigating business, technology, security, privacy, or compliance risks
• Provide transparent assessments and pragmatic recommendations that support informed business decisions
• Experience supporting audits, assessments, compliance activities, or governance frameworks is an advantage
• Stakeholder Management & Communication:
• Consulting, communication, and stakeholder management skills
• Explain technical, legal, and governance topics in a pragmatic and understandable way and collaborate effectively across organizational boundaries
• Collaboration & Influence:
• Collaboration skills and the ability to work effectively across functions, regions, and cultures
• Comfortable building trusted relationships with business and technical stakeholders
• Personality:
• Structured, analytical, and solution-oriented working style; ownership and personal initiative; pragmatic and risk-based mindset; collaborative communication style; and a high degree of customer orientation

Language and communication requirements

• Language Skills: Business fluent in written and spoken English
• Additional language skills, particularly German, are an advantage

Location, schedule and contract conditions

For this overseas or regional listing, confirm work authorisation and any location restrictions with the employer. The location does not establish visa sponsorship or permission to work remotely from India.

• 🔀 Hybrid work system
• 🛡️ Health insurance
• Work arrangement: Hybrid
• Advertised location: Braga, Portugal

Pay and application dates

A verified salary figure is not established in this article. An online estimate for another Information Security & Data Protection Expert (f/m/div.) vacancy is not an offer for reference REF299335V; use the employer’s own pay disclosure and recruitment communication.

A closing date is not confirmed in this article. Check the current employer page before submitting: an undated posting can change or be withdrawn.

How to apply to Bosch Group

Applications follow the official employer page linked below.

Open the official Bosch Group posting below and match the title and reference REF299335V.

Compare your qualifications and experience with the essential conditions for the Braga, Portugal position, then read the preferred criteria separately.

Prepare an accurate CV and the supporting items requested in that employer’s application. Provide only information and documents you are authorised to share.

Use the employer’s application option, complete the required fields and review the submission. Retain the acknowledgement when one is provided. Job Alerts World does not receive the application.

Practical preparation: maintenance

A maintenance example should identify the asset, the fault or preventive task and the action you performed. Explain the checks, records and handover involved in returning equipment or a service to use.

Relevant skills

• maintenance
• audit
• risk management
• stakeholder management
• compliance
• communication