Senior Associate – Security & Compliance (AMS)

About the role

We are looking for a Senior Associate to provide consultancy and support for security and compliance controls across Bosch and industry regulations. You will work closely with stakeholders to assess, document, and improve security posture while ensuring alignment with ISO 27001:2022 and other standards.

Key responsibilities

• Consult on security and compliance controls in line with Bosch/industry regulations.
• Conduct compliance assessments and advise on ISO 27001:2022 and other security frameworks.
• Stay updated on guideline changes and adapt processes accordingly.
• Engage with managers, application owners, and technical teams to assess and document security controls.
• Perform gap analyses for security policies, controls, and procedures.
• Develop and maintain Business Continuity Management Plans.
• Provide guidance on penetration testing, vulnerability scanning, encryption, and backup/storage security.
• Maintain accurate and up‑to‑date security documentation.
• Support implementation of security standards, policies, and regulatory requirements.
• Prepare reports and documentation to demonstrate compliance with relevant standards.
• Ensure customer KPIs, quality, and deliverables are met.

Required profile

• 4‑7 years of relevant experience in security, compliance, GRC or related fields.
• Relevant undergraduate or postgraduate degree.
• Strong written and verbal communication skills in English.
• Ability to work independently with ownership and proactiveness.
• Team‑player attitude, flexibility and deadline orientation.

Required skills

• Knowledge of ISO 27001:2022 security framework.
• Penetration testing, vulnerability scanning, encryption, backup/storage security.
• Business continuity management and application security.
• Identity and Access Management (IAM) and GRC processes.
• Experience with GRC tools (preferred).
• Proficiency in MS Excel (pivot tables, charts, lookup functions), Word and PowerPoint.
• Familiarity with ITIL service management processes (preferred).