Information Security Engineering Specialist

bp; Sunbury-on-Thames; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

bp is seeking an Information Security Engineering Specialist to safeguard digital assets, provide security consultation, manage incidents and ensure robust information assurance across operations. The role emphasizes incident response, governance and cross‑functional collaboration.

Based in the UK with hybrid work, the position involves leading security investigations, developing protective policies and engaging with suppliers to uphold BP security standards while pursuing the company's net-zero

Qualifications

• Proven experience in information security across engineering and operations.
• Experience in incident investigation, forensic analysis and remediation.
• Strong knowledge of incident management methodologies and tools.
• Understanding of information assurance principles, frameworks and regulatory requirements.
• Ability to influence secure information security behaviours across teams.

Responsibilities

• Provide expert consulting on information security guidelines and solutions to internal teams and projects.
• Lead and conduct incident investigation and response for security breaches with timely resolution.
• Manage full lifecycle of security incidents from detection to post-incident review.
• Develop and maintain information assurance frameworks and policies to protect data and systems.
• Promote secure information security behaviour through training and awareness.
• Identify, assess and mitigate information security risks with effective risk management.
• Communicate security concerns clearly to technical and non-technical audiences and maintain strong partner relationships.
• Oversee supplier relationships and ensure adherence to BP's security standards.
• Conduct supplier security management, including assessments, audits and monitoring of third-party posture.

Skills

Information Security

Incident Investigation

Incident Management

Information Assurance

Risk Management

Partner Management

Supplier Relationship Management

Security Governance

Job description

Job Description

Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner.

Entity

Technology

Job Family Group

IT&S Group

Job Description

Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner. Please note that roles based out of SJS or Sunbury will move to Timber Square, Southwark, from Q4 2027.

About The Role

As an Information Security Engineering Specialist at BP PLC, you will be crucial in safeguarding our digital assets by providing expert security consultation, managing incidents, and ensuring robust information assurance across our operations.

Job Responsibilities

• Provide expert consulting services on information security guidelines and solutions to various internal teams and projects.
• Lead and conduct incident investigation and response efforts for security breaches, ensuring timely resolution and minimal impact.
• Manage the full lifecycle of security incidents, from detection and analysis to containment, eradication, recovery, and post-incident review.
• Develop, implement, and maintain comprehensive information assurance frameworks and policies to protect sensitive data and systems.
• Promote and embed secure information security behaviour across the organization through training and awareness initiatives.
• Identify, assess, and mitigate information security risks, implementing effective risk management strategies.
• Cultivate strong partner relationships, effectively communicating security concerns and solutions to technical and non-technical audiences.
• Oversee and manage supplier relationships concerning security, ensuring consistency to BP's security standards.
• Conduct supplier security management, including assessments, audits, and continuous monitoring of third-party security posture.

Job Qualifications

• Proven experience in Information Security with a solid focus on engineering and operational aspects.
• Demonstrated expertise in incident investigation and response, including forensic analysis and remediation.
• In-depth knowledge and practical experience in Incident Management methodologies and tools.
• Solid understanding of Information Assurance principles, frameworks, and regulatory requirements.
• Ability to influence and drive secure information security behaviour across diverse teams.
• Extensive experience in Risk Management, including identification, assessment, and mitigation strategies.
• Excellent Partner Management skills with the ability to communicate complex security concepts effectively.
• Experience in Supplier Relationship Management with a focus on security aspects.
• Proficiency in Supplier security management, including risk assessments and contract reviews.

Why join us?

At bp, we support our people to grow in a diverse and exciting environment. We believe that our team is strengthened by diversity.

There are many aspects of our employees’ lives that are meaningful, so we offer benefits to enable your work to fit with your life. These benefits can include flexible working options, a generous paid parental leave policy, excellent retirement benefits, among others!

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Reinvent your career as you help our business meet the challenges of the future.

Travel Requirement

Negligible travel should be expected with this role.

Relocation Assistance

This role is not eligible for relocation.

Remote Type

This position is a hybrid of office/remote working.

Skills

Future Location Notice: This role will start in Sunbury, London. bp has announced a planned office move to Timber Square, London, with all positions currently advertised in Sunbury, including this one, expected to relocate around Q4 2027-Q1 2028. This presents an exciting opportunity for all employees and leaders to come together in one London location. The specific date of the move will be confirmed closer to the time.

Legal Disclaimer

We are an equal opportunity employer. We do not discriminate on the basis of protected characteristics like race, religion, color, sex, national origin, sexual orientation, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending on your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.