GRC Engineering Lead

bp; Sunbury-on-Thames; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Flexible working options

Parental leave policy

Retirement benefits

Job summary

BP plc is seeking a GRC engineering lead to drive the global GRC technology strategy, architecture, and delivery. You will lead delivery squads across engineering and compliance, advancing AI-driven risk and control capabilities while upholding bp's standards and regulatory obligations.

The role requires building and guiding a high-performing team, fostering continuous improvement, and partnering with regional stakeholders to ensure effective governance across jurisdictions as bp moves some

Qualifications

• Experience leading GRC engineering in a multinational.
• Knowledge of cyber security laws, regs, and industry standards.
• Proven track record in leading cross-functional teams and partnerships.

Responsibilities

• Lead the GRC technology strategy and roadmap across global teams.
• Deliver operational services underpinning GRC and compliance management.
• Develop an AI-driven GRC strategy and measurable improvements in efficiency.
• Oversee governance, risk reporting, and compliance with cyber standards.

Skills

GRC leadership

Incident management

Information security

Risk management

Stakeholder management

Supplier relationship management

Compliance governance

EQ leadership

Education

University degree

Tools

GRC platforms

AI/data platforms

Job description

Entity:TechnologyJob Family Group:IT&S GroupJob Description:Please note that roles based out of SJS or Sunbury will move to Timber Square, Southwark, from Q4 2027.Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner!You will work withAs part of the bp’s Global GRC team and Digital Compliance leadership team you will have responsibility for leading bp’s global GRC engineering teams and compliance management services portfolio. You will own the Global GRC technology, AI and data strategies, lead operational teams and oversee delivery squads to drive bp’s GRC capabilities.The Digital Governance Risk and Compliance organization fosters a culture of transparency, accountability, and trust by promoting good governance, effective risk management, and regulatory compliance. These capabilities help bp balance security with usability, optimize technology investments, and enable bp’s business to meet its compliance obligations in all jurisdictions in which it operates globally.Let me tell you about the roleAs the GRC engineering lead you will be expected to work across teams to develop GRC technology capabilities, drive AI and data strategies and improve the value from GRC and compliance services. You will lead the Global GRC engineering and compliance management team, ensuring bp has the framework, platforms, tools, data and capabilities to meets its GRC obligations.What you will deliverLead the delivery of the GRC technology strategy and roadmap, working across GRC teams and partnering with technology and business teams.Lead the delivery of operational services that underpin GRC and compliance management in bp.Continuous control health monitoring capabilities, including the delivery of platforms, tools, data hubs, interfaces and reporting dashboards.Lead the development and delivery of a AI-driven GRC strategy. Working across GRC teams to deliver measurable improvements in efficiency and business value.Lead the design of the compliance framework for global regulations and industry certifications, including maintenance of applicable risk and control frameworks.Lead applicable governance, stakeholder working groups, progress tracking and risk reporting for cyber security compliance.Lead continuous improvement initiatives to improve effectiveness and efficiency of the compliance program and applicable policies and controls.Manage relationship with in-region stakeholders, business, technology and audit teams.Lead, coach, develop and build a resilient and high-performing team fostering a culture of continuous improvement and career progression.What you will need to be successful (experience and qualifications)You’ll have a tertiary level education and/or equivalent relevant work experience.ExperienceSignificant technology, platform development and operational delivery capability in similar organization or role.Significant experience in a similar cyber security, data, engineering, technology or governance, risk and compliance role for a large multi-national organizationIn depth knowledge of GRC platforms, data engineering and AIUnderstanding or experience of cyber security laws, regulations and industry standards as well as the broader legal & regulatory landscapeProven track record in leadership of teams and in establishing and maintaining effective and collaborative partnershipsLeadership and EQ:Foster positive team morale and empower team membersCreate an environment where people listen and can speak openlyDemonstrate strong leadership, uphold bp's code of conduct and valuesPromote a culture of change, agility, and open communicationSelf-aware and able to recognize and manage your impact on others.Cultural fluency – you operate across cultural boundaries with sensitivity.Why join us?At bp, we support our people to grow in a diverse and exciting environment. We believe that our team is strengthened by diversity.There are many aspects of our employees’ lives that are meaningful, so we offer benefits to enable your work to fit with your life. These benefits can include flexible working options, a generous paid parental leave policy, excellent retirement benefits, among others!We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.Reinvent your career as you help our business meet the challenges of the future. Apply now!Travel RequirementNegligible travel should be expected with this roleRelocation Assistance:This role is not eligible for relocationRemote Type:This position is a hybrid of office/remote workingSkills:Consulting, incident investigation and response, Incident Management, Information Assurance, Information Security, Information security behaviour change, Risk Management, Stakeholder Management, Supplier Relationship Management, Supplier security management.Future Location Notice: This role will start in Sunbury, London. bp has announced a planned office move to Timber Square, London, with all positions currently advertised in Sunbury, including this one, expected to relocate around Q4 2027-Q1 2028. This presents an exciting opportunity for all employees and leaders to come together in one London location. The specific date of the move will be confirmed closer to the time.Legal Disclaimer:We are an equal opportunity employer. We do not discriminate on the basis of protected characteristics like race, religion, color, sex, national origin, sexual orientation, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.Expand job descriptionDisclaimerThis is a high-level summary only of terms and current discretionary benefits applicable to certain roles. Some rewards, benefits and policies are at managers’ discretion and vary depending on where you work within the business. All terms subject to contract and all discretionary benefits subject to policy and eligibility.