Data Protection & Information Security Partner Job at Robert Bosch Sp. z o.o. (Birmingham)

Business Information Security Officer

Brown & Brown is seeking a Business Information Security Officer (BISO) to join ...

Location

United States , Daytona Beach

Salary:

180000.00 - 200000.00 USD / Year

Brown & Brown UK

Expiration Date

Until further notice

Requirements

CISSP, CISM, or equivalent certifications (preferred)
BA/BS in business, security, or technology
8–10+ years of experience in information security, cybersecurity, risk management, governance, physical security, or regulatory compliance, with a focus on business-aligned service delivery
Experience working with cross-functional teams
Working knowledge of ISO27001, NIST, Cyber Essentials and other security standards
Deep experience of security architecture and the tooling required to instantiate
Knowledge of Property & Casualty insurance is a plus
Experience running a SOC and working cyber incidents
Experience leading teams responsible for security across mid-to-large organizations (55+ people)
Strong understanding of organizational environments and their connection to external business drivers

Job Responsibility

Support the implementation, maintenance, and continuous improvement of information and physical security programs in alignment with corporate policies, standards, and frameworks
Contribute as a key member in shaping both the Brown & Brown security roadmap and divisional technology roadmap
Serve as a subject matter expert for information and physical security, supporting strategy development and execution
Provide guidance on prioritizing divisional investments that impact security
Allocate security resources (architecture, engineering, operations, risk management) to meet divisional needs
Support merger and acquisition activities, including pre-deal due diligence and post-deal 90-day security integration
Advise divisional leaders on security-related risk and assist in meeting broader risk management and compliance objectives
Monitor emerging security trends and assess potential impacts to divisions or profit centers
Ensure risk remediation processes are followed, issues are mitigated, and exceptions are tracked according to organizational standards
Manage IT certification and accreditation processes in collaboration with auditors and certification bodies

What we offer

Health Benefits: Medical/Rx, Dental, Vision, Life Insurance, Disability Insurance
Financial Benefits: ESPP
401k
Student Loan Assistance
Tuition Reimbursement
Mental Health & Wellness: Free Mental Health & Enhanced Advocacy Services
Beyond Benefits: Paid Time Off, Holidays, Preferred Partner Discounts and more

Fulltime

Senior GRC & Information Protection Analyst

In this contingent resource assignment, you may: Consult on complex initiatives ...

Location

United States , Charlotte, NC (Brevard) / Chandler, AZ

Salary:

69.00 - 74.00 USD / Hour

Apex Systems

Expiration Date

Until further notice

Requirements

5+ years of Information Security or GRC (Governance, Risk, Controls) experience
Strong experience with enterprise metrics, reporting, and audit support
Excellent communication skills and high attention to detail

Job Responsibility

Execute enterprise governance activities related to data-at-rest protection
Interpret and apply information security policies, standards, and controls
Analyze risk and control gaps and drive remediation actions
Own and manage enterprise security metrics cycles (collection, validation, analysis)
Develop executive-level dashboards, summaries, and presentations
Provide insights and commentary on risk trends and control effectiveness
Produce audit-ready documentation and evidence
Support audit reviews, regulatory requirements, and compliance reporting
Maintain defensible records aligned with enterprise standards
Evaluate complex security and governance challenges

What we offer

medical
dental
vision
life
disability
ESPP (employee stock purchase program)
401K program with company match after 12 months
HSA (Health Savings Account on the HDHP plan)
SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions
corporate discount savings program

Counsel, Privacy, Ai, And Data Protection

The Counsel for Privacy, AI, and Data Protection serves as the enterprise subjec...

Location

United States , Lexington

Salary:

150000.00 - 175000.00 USD / Year

Valvoline Global

Expiration Date

Until further notice

Requirements

Juris Doctor (JD) degree from an accredited law school and active license to practice law in at least one U.S. jurisdiction
Minimum of 8-12 years of legal experience, with significant focus on privacy, data protection, cybersecurity, and/or technology law
Demonstrated expertise in U.S. and global privacy laws and frameworks (e.g., GDPR, CCPA/CPRA) and strong familiarity with emerging AI regulatory requirements
Experience advising on AI/ML technologies, data-driven business models, or digital products, including governance and risk management considerations
Proven experience building or supporting global privacy programs and operationalizing compliance frameworks (e.g., DPIAs, DSARs, data mapping)
Strong experience partnering with Product, Engineering, IT, and Security teams to translate legal requirements into practical solutions
Demonstrated ability to operate independently, manage complex cross-functional initiatives, and provide strategic, risk-based legal advice
Excellent communication, negotiation, and stakeholder engagement skills, with the ability to influence senior leaders
Ability to travel (approximately 10-20%) to support global business initiatives and team engagement
Collaborate effectively across global time zones, providing support to regional stakeholders and participating in meetings outside standard business hours as needed to support a globally distributed organization

Job Responsibility

Accountable for the design, implementation, and ongoing effectiveness of Valvoline's global privacy program, including governance structure, policies, and operational processes
Owns enterprise interpretation and application of global privacy laws (e.g., GDPR, CCPA/CPRA), establishing company-wide standards and guidance
Accountable for core privacy program operations, including DPIAs/PIAs, DSAR processes, data mapping, and records of processing activities, ensuring they are scalable, auditable, and consistently executed
Establishes and monitors program KPIs and metrics to measure compliance, maturity, and operational effectiveness
drives remediation where gaps exist
Leads integration of privacy-by-design principles into business processes, systems, and product development, ensuring consistent adoption across functions
Accountable for the enterprise AI governance framework, including policy development, risk classification models, and required controls
Owns the legal review and risk determination framework for AI/ML use cases, including defining approval thresholds and escalation criteria
Ensures AI initiatives meet regulatory, ethical, and internal governance standards, providing final legal guidance on high-risk or ambiguous use cases
Translates global AI regulatory developments into enforceable internal requirements, ensuring timely adoption across the enterprise

What we offer

Health insurance plans (medical, dental, vision)
Health Savings Account (with an employer-base deposit and match)
Flexible spending accounts
Competitive 401(k) with generous employer base deposit and match
Incentive opportunity
Life insurance
Short- and long-term disability insurance
Paid vacation and holidays
Employee Assistance Program
Employee discounts

Fulltime

Information Security Architect - Telephony / IoT / Cloud / Apps / AI

We have a 6-month contract to hire position open for a Security Architect role. ...

Location

United States , Roseville

Salary:

Not provided

Zeektek

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Cybersecurity, or related field
Master's preferred
7+ years of progressive experience in Information Security Architecture & Operations roles
Certifications: CISSP, CCSP, SABSA, CISM, TOGAF, AI Security Specialist
Deep understanding of network, cloud, and application security across telecom, IT, and IoT ecosystems
Experience designing and securing AI/ML platforms including governance of LLMs and agentic AI tools
Proven experience with regulatory frameworks (FCC, HIPAA, NIST, ISO 27001)
Hands-on experience with cloud-native security (AWS, Azure, GCP) and Dev Sec Ops tooling
Experience with endpoint detection and response (EDR) platforms, ideally Crowdstrike
Hands-on expertise with vulnerability management and SIEM platforms, including Rapid7

Job Responsibility

Develop and maintain the enterprise security architecture framework covering IT, telecom, mobile, and IoT platforms
Lead & partake in enterprise-wide cybersecurity initiatives, aligning with industry frameworks (NIST, ISO, CIS)
Define zero-trust architecture patterns for multi-cloud (AWS, MS Azure) and hybrid environments
Evaluate and recommend new security technologies and processes to address evolving threats
Define and ensure clear direction for configuration, monitoring, and hardening of Cisco security infrastructure including firewalls, VPNs, and intrusion prevention systems
Define and oversee policies & guidelines for vulnerability management programs, and leveraging tools such as Rapid7
Ensure security-by-design principles are embedded in all technology initiatives, including product development and infrastructure modernization
Partner with Enterprise Architecture and Tech Ops teams to align security blueprints with overall technical standards and business capabilities
Define AI/ML and Agentic AI security guardrails, including model access, prompt sanitization, model drift monitoring, and data provenance controls
Develop governance policies for secure use of AI APIs, LLMs, and autonomous agent frameworks

What we offer

Weekly Direct Deposit
401K Matching
Competitive medical, dental and vision insurance
Consistent communication throughout your project
ZeekTek Referral Program

Information Security Analyst

We are looking for an Information Security Analyst to join our Risk, Legal and C...

Location

Australia , Sydney

Salary:

Not provided

LGT Gruppe Holding AG

Expiration Date

Until further notice

Requirements

5+ years in security operations or related IT functions, such as networking or IT systems engineering
Strong understanding of security concepts such as server hardening & patching, M365 & Azure configuration, Endpoint Protection solutions, Vulnerability Management, Firewall configuration, user access management, data loss prevention
Strong understanding of security architecture concepts across on-premises, cloud, and SaaS environments
Experience assessing solution designs and identifying security risks at an architectural level
Ability to translate complex technical and policy-driven security requirements into business-friendly language
Strong pragmatic, risk-based mindset with the ability to balance security, usability, cost, and delivery timelines
Experience engaging in business projects, conduct threat modelling, risk assessments, controls design as well as validating the design and implementation of key controls
Experience driving security initiatives to align technical services with security policies
Strong problem-solving abilities, with a logical and methodical approach to tasks
Excellent communication skills, able to translate technical concepts for non-technical stakeholders

Job Responsibility

Responsible for maintaining a strong security environment, reducing cyber risk exposure, and supporting security operations, monitoring, and reporting
Contributes to LGT WM's information security strategy and risk framework while embedding security requirements into key business projects from the outset
Participates in initiatives to ensure compliance with privacy laws and external regulatory obligations, including GS 007
Support the cyber security assurance program, assisting audit activities and owning the remediation of findings
Support an effective cyber security assurance strategy over third parties / suppliers, enabling the business to engage with strategic partners without taking excessive risk
Conduct third party reviews when required
Actively participate in cyber security strategy formulation, prioritizing the protection of mission critical digital assets and maximizing the value of security investments
Participate in project delivery teams to provide security input throughout the solution lifecycle, from early design through to implementation and go-live
Participate in operational change management and ensure security related changes are adequately tested prior and post implementation, to reduce business impacts

Fulltime

Senior Technical Project Manager - Data Protection

A prominent leader in the Canadian insurance and financial services sector is se...

Location

Canada , Montréal

Salary:

Not provided

Randstad

Expiration Date

July 19, 2026

Requirements

Proven background in cybersecurity infrastructure, specifically focusing on data protection, security operations centers (SOC), vulnerability management, and data analysis
A minimum of 8 to 10 years managing large-scale, complex IT or security projects within an enterprise corporate environment
Ability and willingness to commute regularly to the Montreal office (hybrid model with mandatory on-site presence)
Outstanding capability to translate deeply technical security risks into clear, actionable business strategies for non-technical stakeholders
PMP, CISA, CISM, or related technical security certifications

Job Responsibility

Oversee and deliver end-to-end data protection and data security initiatives for major organizational projects
Partner closely with advanced technology engineering teams and information security units to embed robust security protocols from inception
Facilitate data analysis assessments, track systems vulnerabilities, and coordinate remediation strategies across technical teams
Act as the primary bridge between technical specialists (SOC, security architects) and corporate financial business lines
Establish, monitor, and present key performance indicators (KPIs) and milestone reports to executive leadership

What we offer

Attractive compensation package with comprehensive benefits or competitive market rates
Collaborative, modern corporate culture
Professional Growth

Fulltime

Counsel, Privacy, AI, and Data Protection

Why Valvoline Global Operations? At Valvoline Global Operations, we're proud to ...

Location

United States , Lexington

Salary:

150000.00 - 175000.00 USD / Year

Valvoline

Expiration Date

Until further notice

Requirements

Juris Doctor (JD) degree from an accredited law school and active license to practice law in at least one U.S. jurisdiction
Minimum of 8–12 years of legal experience, with significant focus on privacy, data protection, cybersecurity, and/or technology law
Demonstrated expertise in U.S. and global privacy laws and frameworks (e.g., GDPR, CCPA/CPRA) and strong familiarity with emerging AI regulatory requirements
Experience advising on AI/ML technologies, data-driven business models, or digital products, including governance and risk management considerations
Proven experience building or supporting global privacy programs and operationalizing compliance frameworks (e.g., DPIAs, DSARs, data mapping)
Strong experience partnering with Product, Engineering, IT, and Security teams to translate legal requirements into practical solutions
Demonstrated ability to operate independently, manage complex cross-functional initiatives, and provide strategic, risk-based legal advice
Excellent communication, negotiation, and stakeholder engagement skills, with the ability to influence senior leaders
Ability to travel (approximately 10–20%) to support global business initiatives and team engagement
Collaborate effectively across global time zones, providing support to regional stakeholders and participating in meetings outside standard business hours as needed to support a globally distributed organization

Job Responsibility

Accountable for the design, implementation, and ongoing effectiveness of Valvoline's global privacy program, including governance structure, policies, and operational processes
Owns enterprise interpretation and application of global privacy laws (e.g., GDPR, CCPA/CPRA), establishing company-wide standards and guidance
Accountable for core privacy program operations, including DPIAs/PIAs, DSAR processes, data mapping, and records of processing activities, ensuring they are scalable, auditable, and consistently executed
Establishes and monitors program KPIs and metrics to measure compliance, maturity, and operational effectiveness
drives remediation where gaps exist
Leads integration of privacy-by-design principles into business processes, systems, and product development, ensuring consistent adoption across functions
Accountable for the enterprise AI governance framework, including policy development, risk classification models, and required controls
Owns the legal review and risk determination framework for AI/ML use cases, including defining approval thresholds and escalation criteria
Ensures AI initiatives meet regulatory, ethical, and internal governance standards, providing final legal guidance on high-risk or ambiguous use cases
Translates global AI regulatory developments into enforceable internal requirements, ensuring timely adoption across the enterprise

What we offer

Health insurance plans (medical, dental, vision)
Health Savings Account (with an employer-base deposit and match)
Flexible spending accounts
Competitive 401(k) with generous employer base deposit and match
Incentive opportunity
Life insurance
Short- and long-term disability insurance
Paid vacation and holidays
Employee Assistance Program
Employee discounts

Fulltime

Apac Information Security Operations Lead

We are seeking a hands-on Information Security Operations Lead who combines deep...

Location

Australia , Sydney

Salary:

Not provided

Optiver

Expiration Date

Until further notice

Requirements

Leading or mentoring security engineers, SOC analysts, incident responders, or security operations teams
Broad experience with EDR, SIEM, vulnerability management, identity security, and cloud security tooling
Experience defining and maturing operational processes: alerting, triage, incident response, playbooks, tooling, and escalation workflows
Understanding of SOC workflows, detection tuning/engineering, playbook development, and operational runbooks
Experience leading or coordinating incident response efforts across cross-functional teams
Demonstrated experience building high-performing, collaborative teams in fast-paced environments
Championing a culture of continuous improvement, and operational excellence
Cloud security (AWS + M365), identity management (Entra ID, SSO, conditional access), and data protection desirable
Automation with Python or PowerShell desirable

Job Responsibility

Build and lead a high-performance security engineers and analysts, including managing performance, career development and delivery
Oversee day-to-day security operations, ensuring efficient triage, investigation, escalation, and resolution of security events
Continuously refine operational processes and partner with global security teams to drive alignment in processes, standards, and tooling
Lead the team during high-severity incidents, coordinating efforts across engineering, business, and global stakeholders
Work with engineers to identify automation opportunities, reduce toil, and improve detection and response capabilities
Act as the primary point of contact for operational security topics within APAC and build strong partnerships with all stakeholders
Contribute to the long-term strategy and roadmap for global security operations

What we offer

Performance-based bonus structure
Training, mentorship and personal development opportunities
Daily breakfast, lunch and an in-house barista
Gym membership plus weekly in-house chair massages
Regular social events, including a company trip every two years

Fulltime

Select Country

Data Protection & Information Security Partner

Job Description

Job Responsibility

Requirements

What we offer

Looking for more opportunities?