AMS_Senior_Associate_Ban

Bosch Global Software Technologies Private Limited is a 100% owned subsidiary of Robert Bosch GmbH, one of the world's leading global supplier of technology and services, offering end-to-end Engineering, IT and Business Solutions. With over 27,000+ associates, it’s the largest software development center of Bosch, outside Germany, indicating that it is the Technology Powerhouse of Bosch in India with a global footprint and presence in the US, Europe and the Asia Pacific region.

Roles & Responsibilities

• Coordinate cybersecurity governance and compliance activities for IT applications.
• Support application teams in meeting Bosch CD 09000 cybersecurity requirements.
• Conduct cybersecurity gap assessments and track identified actions to closure.
• Coordinate cybersecurity risk assessments and follow up on risk-mitigation measures.
• Support vulnerability and patch management governance, including tracking findings and remediation status.
• Coordinate activities related to penetration testing, security assessments and cybersecurity reviews with responsible technical teams.
• Support preparation and review of cybersecurity documentation, controls and compliance evidence.
• Track cybersecurity risks, deviations, findings and corrective actions.
• Support internal/external cybersecurity audits and compliance assessments.
• Prepare cybersecurity status reports, KPIs and management updates.
• Consult IT Owners and application teams on cybersecurity processes and compliance requirements.
• Coordinate with cybersecurity experts, infrastructure, application and other technical teams for closure of security gaps.
• Escalate overdue or high-risk cybersecurity findings to responsible stakeholders.

Educational qualification

• Any UG or PG Degree.

 

Experience

• 4–5 years of experience in Cybersecurity Governance, GRC, Information Security, Cybersecurity Compliance or Cybersecurity Consulting.

Mandatory/requires Skills

• Practical experience in coordinating cybersecurity assessments, risks, vulnerabilities, audits and compliance activities.
• ISO 27001, Security+, CISA, CRISC or equivalent cybersecurity certification is an advantage