IT Risk Manager

Job Description

Company Description

The Bosch Group is a leading global supplier of technology and services, employing roughly 400,500 associates worldwide and generating sales of 78 billion euros in 2017 (preliminary figures). Its operations are divided into four business sectors: Mobility Solutions, Industrial Technology, Consumer Goods, and Energy and Building Technology. As a leading IoT company, Bosch offers innovative solutions for smart homes, smart cities, connected mobility, and connected manufacturing. It uses its expertise in sensor technology, software, and services, as well as its own IoT cloud, to offer its customers connected, cross-domain solutions from a single source. The Bosch Group’s strategic objective is to deliver innovations for a connected life. Bosch improves quality of life worldwide with products and services that are innovative and spark enthusiasm. In short, Bosch creates technologies that is “Invented for life.”

Robert Bosch (South East Asia) Pte Ltd is a regional subsidiary of the Bosch Group, representing the Group’s interests in Southeast Asia, where it is currently present in all ASEAN member countries. The company is active in all the company’s four business sectors of Mobility Solutions, Industrial Technology, Consumer Goods, and Energy and Building Technology. The Asia Pacific headquarters for its Automotive Aftermarket, Building Technology and Bosch Software Innovations businesses, as well as operations for Corporate Research and Advance Engineering, and Information Technology, are part of Robert Bosch (SEA) Pte Ltd. In Bosch, we are committed through our EVP ensuring all our associates to GROW, ENJOY and INSPIRE during their journey with us.

Job Description

To sustain the fast and qualitative development progress in Bosch, we are seeking for a passionate and driven IT Risk Manager to join our IT team in Singapore. As a IT Risk Manager, As IT Risk Manager (m/f/d) you will support the implementation of the requirements of the Robert Bosch worldwide Risk Management System within Cl. In addition, you will be responsible for the holistic overall management of technical vulnerabilities in Cl products, services and Solutions as part of the Cl internal service "IT Risk Management".

The selected candidate will also be involved in Fields of action in relation to the implementation of the RB-wide risk management system (RB/GF104):

+ Planning, implementation, and follow-up of workshops to identify and assess risks

+ Regular verification and, if necessary, reassessment of the Cl risk portfolio

+ Reporting and maintenance of already reported risks in the risk management tool

+ Continuous review of the Cl-internal implementation of RB/GF104 requirements

+ Continuous improvement of the IT risk management methodology

+ Regular reporting and alignment with relevant stakeholders (e.g. Cl/GL, C/RMS, CDO/P, governance units)

Fields of action in relation to Cl IT Risk Management:

+ Identification of vulnerabilities within Cl products, services and solutions by applying suitable methods (e.g. threat and risk analysis)

+ Assessment of vulnerabilities and associated risks, considering likelihood and impact

+ Driving sustainable risk mitigation approaches or measures to close vulnerabilities in alignment with the respective responsible product/service organization within Cl. Coordination and follow-up of measures as well as verification of implemented measures’ effectiveness. Documentation and maintenance in the IT Risk Management Tool

+ Regular reporting to relevant stakeholders (CI departments, Cl/GL, governance units)

+ Continuous improvement of the IT Risk Management System (e.g. with regard to methodology for risk identification and assessment, processes, as well as on tool level)

+ Implementation and maintenance of interfaces to other relevant areas and stakeholders (e.g. to the RB-wide central RMS, audit and certification activities, internal control system, IT Security project sponsorship, statutory auditors, etc.)

In addition, you will have the opportunity to support other Cl/RMO activities (e.g. Audit Support Service, Internal Control System, etc.) and develop a strong expertise in this environment.

Qualifications

• To be successful in this role, you must have a bachelor's/master's degree or PhD in IT / Computer Engineering or similar discipline with at least 3 years of working experience as Risk Manager in the IT industry.
• You have strong expertise in the field of information technology and/or IT security
• Work in a structured way. You appreciate a close and collegial cooperation in the team, but you also drive tasks independently and on your own responsibility.
• Able to convince stakeholders on various levels with strong communication, presentation, and negotiation skills.

Additional advantageous skills:

• It would be an advantage if you are already familiar with the Cl organization.
• Have experience in the identification, (quantitative/qualitative) assessment and control of risks or risk-oriented auditing of IT products. It would be an asset if you are familiar with international standards and relevant internal/external regulations related to IT risk management.

Additional Information

Job Location