Information Security & Data Protection AuditorC
Job Summary
- Execute information security and privacy audits according to the established audit plan and methodology.
- Conduct audit interviews collect and evaluate audit evidence and assess the design and effectiveness of security and privacy controls.
- Perform audits covering information security governance identity and access management (IAM) cloud security vulnerability management logging and monitoring endpoint security data protection incident response third-party security and privacy compliance.
- Identify security and privacy risks document audit findings support the preparation of audit reports and provide practical remediation recommendations.
- Track remediation progress and verify the effectiveness of corrective actions.
- Collaborate with business IT Legal Compliance Privacy and other stakeholders to facilitate audit activities and promote continuous improvement of security controls.
- Support the continuous improvement of audit methodologies templates and knowledge repositories.
- Keep up to date with emerging cybersecurity threats privacy regulations and industry best practices.
Qualifications :
- Bachelors degree or above in Information Security Computer Science Information Systems Cybersecurity or a related field.
- Minimum 3 years of experience in information security auditing IT auditing data protection auditing cybersecurity or related areas.
- Hands-on experience in security control assessment risk identification audit evidence analysis and remediation verification.
- Solid technical understanding of one or more of the following areas: Identity and Access Management (IAM) cloud security network security vulnerability management logging and security monitoring endpoint security data protection and encryption incident response and third-party security.
- Familiarity with privacy protection principles personal data lifecycle management and relevant standards and regulations such as ISO/IEC 27001 ISO/IEC 27701 TISAX/VDA ISA GDPR PIPL and ISO 9001.
- Professional certifications such as CISA CISSP CISM ISO/IEC 27001 Lead Auditor ISO/IEC 27701 Lead Auditor CIPM CIPP or CDPSE are preferred.
- Proficient in written and spoken English with the ability to use English as the working language for meetings audit interviews documentation and communication.
- Strong analytical thinking communication and cross-functional collaboration skills; detail-oriented self-motivated and capable of supporting audit projects simultaneously.
Additional Information :
By choice we are committed to a diverse workforce and are an equal opportunity employer. Robert Bosch welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in the selection process.
Remote Work :
No
Employment Type :
Full-time
About Company
Bosch first started in Vietnam with a representative office in 1994. Bosch has its main office in Ho Chi Minh City, with branch offices in Hanoi and Da Nang, and a Powertrain Solutions plant in the Dong Nai province to manufacture pushbelt for continuously variable transmissions (CVT) ... View more