Mobile Governance, Risk, Compliance (GRC) Lead (f/m)

Our requirements

• Experience: 5+ years of experience in IT Governance, IT Security, or IT Compliance, specifically within an enterprise environment.
• MDM Knowledge: Strong familiarity with Mobile Device Management (MDM/UEM) concepts (e.g., Intune, Workspace ONE, SOTI MobiControl) and mobile security frameworks.
• Governance & Risk: Proven track record in managing IT Risk Registers and conducting formal IT assessments or audits.
• Technical Proficiency: Solid understanding of vulnerability management tools and the lifecycle of penetration testing.
• Communication: Fluency in English (written and verbal) is mandatory. You must be able to draft formal security reports and communicate complex technical risks to non-technical legal/business partners.
• Resilience: Ability to work under pressure, meet tight compliance deadlines, and navigate challenging discussions with senior stakeholders.

Optional

• Language: Proficiency in German (written/verbal) is a strong plus.
• Certifications: CISM, CISA, CISSP, or CRISC certifications.
• Project Management / Agile processes

Your responsibilities

• Strategic Security Liaison: Serve as the main interface between the Smart Mobile Devices team and central functions, including Cybersecurity, Vulnerability Management, Data Privacy, Quality Management, and Legal.
• Mobile Security Committee Leadership: Chair and host the monthly Mobile Security Committee. This includes setting the agenda, driving cross-functional alignment, and ensuring action items are addressed by stakeholders from cybersecurity and legal teams.
• Risk Management & Governance: Maintain and evolve the IT Risk Registers for the Smart Mobile Devices portfolio. Identify, document, and track risks, ensuring mitigation strategies are effectively implemented in line with corporate IT Risk Management frameworks.
• Vulnerability & Patch Management: Lead the vulnerability lifecycle for mobile hardware and OS. Coordinate with Product Managers to ensure critical patches are deployed and security baselines (iOS/Android/Rugged) are met.
• Audit & Assessment Oversight: Lead the annual IT self assessments for all products & services in the Smart Mobile Devices portfolio. Coordinate with internal and external auditors to ensure compliance with global standards.
• Penetration Testing: Define the scope and lead the execution of regular penetration tests for mobile applications and device configurations, managing the remediation of discovered flaws.
• Regulatory Interpretation & Consultation: Review and interpret "legalese" central directives and global regulations (e.g., GDPR, NIST, ISO 27001), translating them into technical requirements and actionable policies for the Smart Mobile Devices team.
• Stakeholder Management: Engage with strongly opinionated stakeholders across different business units. Facilitate intense technical and strategic discussions to reach a consensus on security trade-offs.

About the project

What will make you successful?

• Customer-oriented mindset with the ability to balance standard SAP solutions and business-specific needs.
• Pragmatic approach to decision-making, considering quality, delivery speed, and long-term sustainability.
• Passion for sharing knowledge and supporting team development.

Additional Information

What we offer

• Employment Contract
• Competitive salary + annual bonus
• Hybrid work with flexible working hours
• Referral Bonus Program
• Copyright costs for IT employees
• Complex environment of working, professional support and possibility to share knowledge and best practices
• Ongoing development opportunities in a multinational environment
• Broad access to professional trainings (incl. language courses), conferences and webinars
• Private medical care and life insurance
• Cafeteria System with multiple benefits (incl. MultiSport, shopping vouchers, cinema tickets, etc.)
• Prepaid Lunch Card
• Number of benefits for families (for instance summer camps for kids)
• Non-working day on the 31st of December

Benefits

• private medical care
• sharing the costs of professional training & courses
• life insurance
• flexible working time
• corporate products and services at discounted prices
• integration events
• coffee / tea
• leisure zone
• pre-paid cards
• employee referral program
• charity initiatives
• one shorter working day

Recruitment stages

• 1.
  Phone interview with a recruiter
• 2.
  Meeting with a direct manager
• 3.
  Meeting with a higher level manager

Robert Bosch Sp. z o.o.