Information Security Engineering Specialist

About this role

Entity

Technology

Job Family Group

IT&S Group

Job Description

Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner.

Please note that roles based out of SJS or Sunbury will move to Timber Square, Southwark, from Q4 2027.

As an Information Security Engineering Specialist at BP PLC, you will be crucial in safeguarding our digital assets by providing expert security consultation, managing incidents, and ensuring robust information assurance across our operations.

Job Responsibilities

Provide expert consulting services on information security guidelines and solutions to various internal teams and projects.

Lead and conduct incident investigation and response efforts for security breaches, ensuring timely resolution and minimal impact.

Manage the full lifecycle of security incidents, from detection and analysis to containment, eradication, recovery, and post-incident review.

Develop, implement, and maintain comprehensive information assurance frameworks and policies to protect sensitive data and systems.

Promote and embed secure information security behaviour across the organization through training and awareness initiatives.

Identify, assess, and mitigate information security risks, implementing effective risk management strategies.

Cultivate strong partner relationships, effectively communicating security concerns and solutions to technical and non-technical audiences.

Oversee and manage supplier relationships concerning security, ensuring consistency to BP's security standards.

Conduct supplier security management, including assessments, audits, and continuous monitoring of third-party security posture.

Job Qualifications

Proven experience in Information Security with a solid focus on engineering and operational aspects.

Demonstrated expertise in incident investigation and response, including forensic analysis and remediation.

In-depth knowledge and practical experience in Incident Management methodologies and tools.

Solid understanding of Information Assurance principles, frameworks, and regulatory requirements.

Ability to influence and drive secure information security behaviour across diverse teams.

Extensive experience in Risk Management, including identification, assessment, and mitigation strategies.

Excellent Partner Management skills with the ability to communicate complex security concepts effectively.

Experience in Supplier Relationship Management with a focus on security aspects.

Proficiency in Supplier security management, including risk assessments and contract reviews.

Why join us?

At bp, we support our people to grow in a diverse and exciting environment. We believe that our team is strengthened by diversity.

There are many aspects of our employees’ lives that are meaningful, so we offer benefits to enable your work to fit with your life. These benefits can include flexible working options, a generous paid parental leave policy, excellent retirement benefits, among others!

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Reinvent your career as you help our business meet the challenges of the future. Apply now!

Travel Requirement

Negligible travel should be expected with this role

Relocation Assistance

This role is not eligible for relocation

Remote Type

This position is a hybrid of office/remote working

Skills

.

Future Location Notice: This role will start in Sunbury, London. bp has announced a planned office move to Timber Square, London, with all positions currently advertised in Sunbury, including this one, expected to relocate around Q4 2027-Q1 2028. This presents an exciting opportunity for all employees and leaders to come together in one London location. The specific date of the move will be confirmed closer to the time.

Legal Disclaimer

We are an equal opportunity employer. We do not discriminate on the basis of protected characteristics like race, religion, color, sex, national origin, sexual orientation, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.

.text-jd a { color: #007f00; text-decoration: underline; }

Expand job description

Disclaimer

This is a high-level summary only of terms and current discretionary benefits applicable to certain roles. Some rewards, benefits and policies are at managers’ discretion and vary depending on where you work within the business. All terms subject to contract and all discretionary benefits subject to policy and eligibility.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.