Information & Cyber Security Expert

About the role

The Information & Cyber Security Expert will act as the Cyber Security Manager for assigned projects, serving as the main contact for sites and IT applications to ensure the deployment of security standards. This role involves planning assessments, delivering compliance services, and reporting security status to stakeholders.

Key responsibilities

• Represent the Cyber Security Manager role for assigned projects.
• Serve as the main contact for sites or IT applications to deploy Information & Cyber Security standards.
• Plan and perform Cyber Security assessments such as security audits and risk analysis.
• Deliver standardized Cyber Security & IT compliance services, including vulnerability management, operator self‑check reviews, penetration test coordination, awareness sessions, training, and templates.
• Determine and report Cyber Security status to plant managers and IT owners.
• Consult and support implementation of sustainable risk‑mitigation and IT compliance measures.
• Maintain inventory of risks and ensure timely closure of corrective actions.
• Support the development of a positive IT risk‑aware culture.

Required profile

• Bachelor’s degree in IT, Computer Science, Information Security or related field.
• Approximately 10 years of experience, with at least 3 years in progressive Information Security, Cyber Security, IT Risk Analysis or audits.
• Proven experience conducting comprehensive Cyber Security assessments or IT audits.
• Understanding of IT control frameworks such as ISO 27001, CIS, and Bosch regulatory requirements (CD09000, CD02900).
• Stakeholder‑driven attitude to consult and support IT owners and department heads.
• Systematic approach with strong analytical and problem‑solving skills and meticulous attention to detail.
• Advanced written and verbal communication skills for articulating technical concepts to diverse audiences.
• Ability to work independently and within a global, fast‑paced team.
• Strong presentation and training delivery capabilities.

Required skills

• Vulnerability Management
• Penetration Testing (PenTests)
• Security Audits
• Risk Analysis
• Knowledge of ISO 27001 and CIS frameworks
• ISO 27001 Lead Auditor certification
• CRISC certification
• CISSP certification
• CISM certification
• CISA certification