AMS_Senior_Associate_Ban

Bosch Global Software Technologies Private Limited is a 100% owned subsidiary of Robert Bosch GmbH, one of the world's leading global supplier of technology and services, offering end-to-end Engineering, IT and Business Solutions. With over 27,000+ associates, it’s the largest software development center of Bosch, outside Germany, indicating that it is the Technology Powerhouse of Bosch in India with a global footprint and presence in the US, Europe and the Asia Pacific region.

Roles & Responsibilities :

• Coordinate cybersecurity governance and compliance activities for IT applications.

• Support application teams in meeting Bosch CD 09000 cybersecurity requirements.

• Conduct cybersecurity gap assessments and track identified actions to closure.

• Coordinate cybersecurity risk assessments and follow up on risk-mitigation measures.

• Support vulnerability and patch management governance, including tracking findings and remediation status.

• Coordinate activities related to penetration testing, security assessments and cybersecurity reviews with responsible technical teams.

• Support preparation and review of cybersecurity documentation, controls and compliance evidence.

• Track cybersecurity risks, deviations, findings and corrective actions.

• Support internal/external cybersecurity audits and compliance assessments.

• Prepare cybersecurity status reports, KPIs and management updates.

• Consult IT Owners and application teams on cybersecurity processes and compliance requirements.

• Coordinate with cybersecurity experts, infrastructure, application and other technical teams for closure of security gaps.

• Escalate overdue or high-risk cybersecurity findings to responsible stakeholders.

Educational qualification:

• Any UG or PG Degree.

   

Experience :

• 4–5 years of experience in Cybersecurity Governance, GRC, Information Security, Cybersecurity Compliance or Cybersecurity Consulting.

Mandatory/requires Skills :

• Practical experience in coordinating cybersecurity assessments, risks, vulnerabilities, audits and compliance activities.

• ISO 27001, Security+, CISA, CRISC or equivalent cybersecurity certification is an advantage