Information Security Engineering Specialist

Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner., As an Information Security Engineering Specialist at BP PLC, you will be crucial in safeguarding our digital assets by providing expert security consultation, managing incidents, and ensuring robust information assurance across our operations., * Provide expert consulting services on information security guidelines and solutions to various internal teams and projects.

• Lead and conduct incident investigation and response efforts for security breaches, ensuring timely resolution and minimal impact.
• Manage the full lifecycle of security incidents, from detection and analysis to containment, eradication, recovery, and post-incident review.
• Develop, implement, and maintain comprehensive information assurance frameworks and policies to protect sensitive data and systems.
• Promote and embed secure information security behaviour across the organization through training and awareness initiatives.
• Identify, assess, and mitigate information security risks, implementing effective risk management strategies.
• Cultivate strong partner relationships, effectively communicating security concerns and solutions to technical and non-technical audiences.
• Oversee and manage supplier relationships concerning security, ensuring consistency to BP’s security standards.
• Conduct supplier security management, including assessments, audits, and continuous monitoring of third-party security posture.

• Proven experience in Information Security with a solid focus on engineering and operational aspects.
• Demonstrated expertise in incident investigation and response, including forensic analysis and remediation.
• In-depth knowledge and practical experience in Incident Management methodologies and tools.
• Solid understanding of Information Assurance principles, frameworks, and regulatory requirements.
• Ability to influence and drive secure information security behaviour across diverse teams.
• Extensive experience in Risk Management, including identification, assessment, and mitigation strategies.
• Excellent Partner Management skills with the ability to communicate complex security concepts effectively.
• Experience in Supplier Relationship Management with a focus on security aspects.
• Proficiency in Supplier security management, including risk assessments and contract reviews.

There are many aspects of our employees’ lives that are meaningful, so we offer benefits to enable your work to fit with your life. These benefits can include flexible working options, a generous paid parental leave policy, excellent retirement benefits, among others!