Digital Security Lead: Cyber Risk & Strategy

BP PLC; Greater London; Hybrid; GBP 90,000 - 150,000; Full time

Benefits offered by this job

Flexible working options

Generous parental leave policy

Excellent retirement benefits

Job summary

bp is seeking a Senior Information Security Lead to drive security activities across the ST&S portfolio, balancing business ambitions with cyber resilience. You will deliver security by designing robust controls, leading incident responses, and embedding security across product development and operations in a hybrid setup.

You will influence diverse stakeholders, manage complex security risks, and guide teams to ensure regulatory and policy alignment while enabling commercial growth.

Qualifications

• Degree educated, preferably a BSc in Information Security or equivalent.
• CISM or CISSP or working towards certification.
• Knowledge of ISO 27001/2, NIST, CIS frameworks is highly helpful.
• Proven track record in internal/external information security roles; leading teams or junior practitioners.
• Strong influencing skills for communicating to technical and non-technical audiences.
• Deep technical knowledge and experience delivering security solutions and advising technically.

Responsibilities

• Monitor and assess digital security threats and risks across value streams.
• Develop and implement robust security measures to protect data and systems.
• Lead response and recovery efforts during security incidents with a calm, structured approach.
• Educate and advocate security awareness across the organisation.
• Innovate and guide security considerations in product development and business operations.
• Protect and defend by coordinating remediation of vulnerabilities and supplier risk.

Skills

Security leadership

Threat assessment

Stakeholder management

Risk management

Communication skills

Education

BSc Information Security

Job description

bp is seeking a Senior Information Security Lead to drive security activities across the ST&S portfolio, balancing business ambitions with cyber resilience. You will deliver security by designing robust controls, leading incident responses, and embedding security across product development and operations in a hybrid setup.

You will influence diverse stakeholders, manage complex security risks, and guide teams to ensure regulatory and policy alignment while enabling commercial growth.