Total 9 job vacancies by Bosch Group

Mandatory SkillsOverall, 4 - 5 years of experience as SAP Security Consultant with Strong working experience and ready to travel on need basis.

Minimum 1 or 2 end to end implementation experience in SAP GRC/AC or S4Hana/ECC security or SAP Cloud.

Experience in Role re-design projects.

Design, implement, and manage SAP security roles and authorizations to ensure a secure SAP environment.

Work collaboratively with cross-functional teams and IT to understand business requirements and translate them into effective SAP security solutions.

Implement and configure SAP GRC modules to manage access controls, risk management, and compliance.

Conduct periodic access reviews, analyze risk assessment reports, and ensure adherence to regulatory requirements.

Design and implement SAP Fiori applications to ensure secure integration of Fiori applications with existing SAP systems.

Investigate and respond to security incidents related to SAP systems, GRC, and Fiori.

Maintain comprehensive documentation of SAP security configurations, GRC policies, and Fiori security measures.

Strong experience in Fiori security with sound knowledge on Catalogues, Groups, Spaces, Pages, and OData Services.

Good knowledge in all the phases of projects- Build, Testing and deployment.

Good understanding of SOX, Audits and Segregation of Duties.

Good to have BW, SRM, CRM and HR systems related security knowledge.

SAP Security certifications will have added advantage.

Soft skills:Communication and Presentation skills to play customer facing roles.

Strong communication skills to lead and drive topics independently.

Flexible to adapt with the Project schedules and demands.

German Language skills can be an added advantage.

Good to have ability to demonstrate as cross functional and ability to work in a collaborative team environment.

Primary Responsibilities and Accountability:<p style="text-align:start">Develop and manage information security & privacy related concept of the business unit<p style="text-align:start">Support the business owner in ensuring the business operations are as per the security expectations set – corporate, regional and domain specific<p style="text-align:start">Responsible for information privacy and security awareness initiative and programs<p style="text-align:start">Responsible for audits and other privacy compliance checks – internal and external<p style="text-align:start">Responsible for all the operational activities of business unit pertaining to information security and privacy<p style="text-align:start">Be a catalyst and support all information security initiatives of the business unit<p style="text-align:start">Be a SPOC for all the information security & privacy related queries and issues<p style="text-align:start">Specific Tasks :<p style="text-align:start">Develop and maintain ISP Concept – IS Regulations and IS Documentation<p style="text-align:start">Responsible for DSP Self-checks and DSO Audits including closing the corrective and preventive actions.<p style="text-align:start">Responsible for ISP awareness training initiatives<p style="text-align:start">Consultation and Support on privacy and security related queries to the users<p style="text-align:start">Familiarity with legal, regulatory and other compliance needs in the area of information security and identity and access management<p style="text-align:start">Good knowledge and experience on typical organizational structure and functional dynamics<p style="text-align:start">Process and procedure documentation skills<p style="text-align:start">Certifications :<p style="text-align:start">ISO27001 Certified

• Advise solution-oriented departments and projects in product development on data protection requirements.
• Co-ordinate with Security Manager & Provide Data protection Measures (Technical & Organizational) for Security Concept.
• Ensure compliance with data protection requirements in engineering projects where products process personal data.
• Support the design of Bosch data protection standards and advise on the design process (Privacy by Design, Privacy by Default).
• Responsible for drafting and reviewing documents, agreements, terms of use and regulations relating to information security and data protection.
• In cross-border development projects, work with local data protection partners in European and international countries to ensure compliance with local data protection rules in the target markets.
• Handling Data Protection aspects during Requirements Analysis, Design and deployment
• Support in Risk Assessment and recommend measures & controls for risk mitigation.
• Review with DSO, the Product Data Protection artifacts during QG reviews.
• Support DSO for ISP audits for Bosch Products.
• Update DSO with monthly MIS .
• Maintain and update Projects Master data and status of the projects for Data Protection review.

Personality: Assertive, team-minded, committed and communicative, self-motivated , proactiveWorking method: Independent, structured, solution-oriented and ready to quickly familiarize oneself with new topicsExperience: Professional experience ideally in the implementation of legal and operational data protection requirements as well as in IT securityKnow-how: Knowledge of data protection law, in the analysis and evaluation of facts as well as good understanding of economic and technical correlationsTechnical : Knowledge of IT Systems, IoT products, Digital offerings, SDLC,Cloud Computing , Certification in Data Protection (DCPP , DCPLA, CIPM/E (GDPR))

• Advise solution-oriented departments and projects in product development on data protection requirements.
• Co-ordinate with Security Manager & Provide Data protection Measures (Technical & Organizational) for Security Concept.
• Ensure compliance with data protection requirements in engineering projects where products process personal data.
• Support the design of Bosch data protection standards and advise on the design process (Privacy by Design, Privacy by Default).
• Responsible for drafting and reviewing documents, agreements, terms of use and regulations relating to information security and data protection.
• In cross-border development projects, work with local data protection partners in European and international countries to ensure compliance with local data protection rules in the target markets.
• Handling Data Protection aspects during Requirements Analysis, Design and deployment
• Support in Risk Assessment and recommend measures & controls for risk mitigation.
• Review with DSO, the Product Data Protection artifacts during QG reviews.
• Support DSO for ISP audits for Bosch Products.
• Update DSO with monthly MIS .
• Maintain and update Projects Master data and status of the projects for Data Protection review.

Personality: Assertive, team-minded, committed and communicative, self-motivated , proactiveWorking method: Independent, structured, solution-oriented and ready to quickly familiarize oneself with new topicsExperience: Professional experience ideally in the implementation of legal and operational data protection requirements as well as in IT securityKnow-how: Knowledge of data protection law, in the analysis and evaluation of facts as well as good understanding of economic and technical correlationsTechnical : Knowledge of IT Systems, IoT products, Digital offerings, SDLC,Cloud ComputingCertification in Data Protection (DCPLA, CIPM/E (GDPR))

Mandatory Skills

• Overall, 4 - 5 years of experience as SAP Security Consultant with Strong working experience and ready to travel on need basis.
• Minimum 1 or 2 end to end implementation experience in SAP GRC/AC or S4Hana/ECC security or SAP Cloud.
• Experience in Role re-design projects.
• Design, implement, and manage SAP security roles and authorizations to ensure a secure SAP environment.
• Work collaboratively with cross-functional teams and IT to understand business requirements and translate them into effective SAP security solutions.
• Implement and configure SAP GRC modules to manage access controls, risk management, and compliance.
• Conduct periodic access reviews, analyze risk assessment reports, and ensure adherence to regulatory requirements.
• Design and implement SAP Fiori applications to ensure secure integration of Fiori applications with existing SAP systems.
• Investigate and respond to security incidents related to SAP systems, GRC, and Fiori.
• Maintain comprehensive documentation of SAP security configurations, GRC policies, and Fiori security measures.
• Strong experience in Fiori security with sound knowledge on Catalogues, Groups, Spaces, Pages, and OData Services.
• Good knowledge in all the phases of projects- Build, Testing and deployment.
• Good understanding of SOX, Audits and Segregation of Duties.
• Good to have BW, SRM, CRM and HR systems related security knowledge.
• SAP Security certifications will have added advantage.

Soft skills:

• Communication and Presentation skills to play customer facing roles.
• Strong communication skills to lead and drive topics independently.
• Flexible to adapt with the Project schedules and demands.
• German Language skills can be an added advantage.
• Good to have ability to demonstrate as cross functional and ability to work in a collaborative team environment.

• Advise solution-oriented departments and projects in product development on data protection requirements.
• Co-ordinate with Security Manager & Provide Data protection Measures (Technical & Organizational) for Security Concept.
• Ensure compliance with data protection requirements in engineering projects where products process personal data.
• Support the design of Bosch data protection standards and advise on the design process (Privacy by Design, Privacy by Default).
• Responsible for drafting and reviewing documents, agreements, terms of use and regulations relating to information security and data protection.
• In cross-border development projects, work with local data protection partners in European and international countries to ensure compliance with local data protection rules in the target markets.
• Handling Data Protection aspects during Requirements Analysis, Design and deployment
• Support in Risk Assessment and recommend measures & controls for risk mitigation.
• Review with DSO, the Product Data Protection artifacts during QG reviews.
• Support DSO for ISP audits for Bosch Products.
• Update DSO with monthly MIS .
• Maintain and update Projects Master data and status of the projects for Data Protection review.

Personality: Assertive, team-minded, committed and communicative, self-motivated , proactiveWorking method: Independent, structured, solution-oriented and ready to quickly familiarize oneself with new topicsExperience: Professional experience ideally in the implementation of legal and operational data protection requirements as well as in IT securityKnow-how: Knowledge of data protection law, in the analysis and evaluation of facts as well as good understanding of economic and technical correlationsTechnical : Knowledge of IT Systems, IoT products, Digital offerings, SDLC,Cloud ComputingCertification in Data Protection (DCPLA, CIPM/E (GDPR))

Primary Responsibilities and Accountability:Develop and manage information security & privacy related concept of the business unitSupport the business owner in ensuring the business operations are as per the security expectations set – corporate, regional and domain specificResponsible for information privacy and security awareness initiative and programsResponsible for audits and other privacy compliance checks – internal and externalResponsible for all the operational activities of business unit pertaining to information security and privacyBe a catalyst and support all information security initiatives of the business unitBe a SPOC for all the information security & privacy related queries and issuesSpecific Tasks :Develop and maintain ISP Concept – IS Regulations and IS DocumentationResponsible for DSP Self-checks and DSO Audits including closing the corrective and preventive actions.Responsible for ISP awareness training initiativesConsultation and Support on privacy and security related queries to the usersFamiliarity with legal, regulatory and other compliance needs in the area of information security and identity and access managementGood knowledge and experience on typical organizational structure and functional dynamicsProcess and procedure documentation skills

Design and Development of embedded Security Software such as OS hardening, Trusted boot, secure flash, secure debug, secure coding, secure logging, secure lifecycle, and secure communication for ADAS product areas.

Ensure process compliance with respect to ASPICE and QMM

Skills Required:

Experience in analysis of SOC(system on chip) specifications HSM and defining overall product security concept and design.

Experience in security features for automotive on both Microcontroller/ Microprocessor domains

Experience on OS Hardening, Security policy, Security policy deployment on processing unit.

Knowledge of Autosar Security modules like CAL (Crypto Abstraction Layer), CSM (Crypto Service Manager), SecOC.

Usage of crypto libraries, hardware security module and PKI

Experience in performing TARA to identify remaining residual risk in project.

General Skills

Very good knowledge of C &/ C++

Good debugging skills

Good knowledge on Micro controllers & processors.

Good Communication skills & ability to work independently

Familiar with Jenkins, JIRA, Doors, Git and Cmake

Awareness of the SW development life cycle (Process, Methods & Tools)

Keywords: #CAL, #CSM, #SecOC, #HSM, #OS Hardening, #Trusted Boot

Soft Skills:

• Self-Motivated individuals
• Ability to work Independent as well as a good Team Player
• Strong written and oral Communication skills
• Strong Interpersonal skills
• Customer Interaction & Stake-holder management

- Experience 6-12 Yrs- Strong Know How on experience on Security concepts : -Cryptographic Algorithms -MAC -Firewall- Good knowledge in Secure Coding/Secure Boot/Secure Diagnostics/Secure Communication- Good know how in HSM integration, Micro controller security Features- Good knowledge on the Security Engineering Process(SEP, TARA, ISO21434 etc)- Programming Experience in Embedded and Embedded C.- Good Knowledge & Work Experience in Micro-controllers & Debuggers(8/16/32-bit)- Experience in Implementation of Security Architecture for a Product- Experience in Design/Coding of HW Security features- Experience in AUTOSAR.- Experience in CAN and Ethernet protocols and Security Solutions

Additional Skills:- Good analytical & communication skills.- Willingness to take up responsibility & ownership.- Self-learning & Self-motivated with a good learning curve