Information Security Engineering Specialist

BP PLC; United Kingdom; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

flexible working options

generous paid parental leave policy

excellent retirement benefits

Job summary

BP PLC is seeking an Information Security Engineering Specialist to safeguard digital assets, provide security consulting, and manage incidents across operations. The role focuses on incident investigation, information assurance, and embedding secure behaviours throughout the organisation.

The position supports a hybrid working model with travel and relocation considerations as BP plans future moves to Timber Square, London.

Qualifications

• Proven experience in Information Security with a solid focus on engineering and operational aspects.
• Demonstrated expertise in incident investigation and response, including forensic analysis and remediation.
• In-depth knowledge of Incident Management methodologies and tools.
• Solid understanding of Information Assurance principles, frameworks, and regulatory requirements.

Responsibilities

• Provide expert consulting services on information security guidelines and solutions to internal teams and projects.
• Lead and conduct incident investigation and response efforts for security breaches, ensuring timely resolution and minimal impact.
• Manage the full lifecycle of security incidents, from detection and analysis to containment, eradication, recovery, and post-incident review.
• Develop, implement, and maintain comprehensive information assurance frameworks and policies to protect data and systems.
• Promote and embed secure information security behaviour across the organization through training and awareness initiatives.
• Identify, assess, and mitigate information security risks with effective risk management strategies.
• Cultivate strong partner relationships, communicating security concerns to technical and non-technical audiences.
• Oversee supplier relationships concerning security, ensuring BP's security standards are met.
• Conduct supplier security management, including assessments, audits, and continuous monitoring of third-party posture.

Skills

Information Security

Incident investigation

Incident management

Information assurance

Risk management

Partner management

Supplier security management

Job description

Entity: Technology Job Family Group: IT&S Group Job Description: Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner.

Please note that roles based out of SJS or Sunbury will move to Timber Square, Southwark, from Q4 2027.

About the role:

As an Information Security Engineering Specialist at BP PLC, you will be crucial in safeguarding our digital assets by providing expert security consultation, managing incidents, and ensuring robust information assurance across our operations.

Job Responsibilities:

• Provide expert consulting services on information security guidelines and solutions to various internal teams and projects.
• Lead and conduct incident investigation and response efforts for security breaches, ensuring timely resolution and minimal impact.
• Manage the full lifecycle of security incidents, from detection and analysis to containment, eradication, recovery, and post-incident review.
• Develop, implement, and maintain comprehensive information assurance frameworks and policies to protect sensitive data and systems.
• Promote and embed secure information security behaviour across the organization through training and awareness initiatives.
• Identify, assess, and mitigate information security risks, implementing effective risk management strategies.
• Cultivate strong partner relationships, effectively communicating security concerns and solutions to technical and non-technical audiences.
• Oversee and manage supplier relationships concerning security, ensuring consistency to BP's security standards.
• Conduct supplier security management, including assessments, audits, and continuous monitoring of third-party security posture.

Job Qualifications:

• Proven experience in Information Security with a solid focus on engineering and operational aspects.
• Demonstrated expertise in incident investigation and response, including forensic analysis and remediation.
• In-depth knowledge and practical experience in Incident Management methodologies and tools.
• Solid understanding of Information Assurance principles, frameworks, and regulatory requirements.
• Ability to influence and drive secure information security behaviour across diverse teams.
• Extensive experience in Risk Management, including identification, assessment, and mitigation strategies.
• Excellent Partner Management skills with the ability to communicate complex security concepts effectively.
• Experience in Supplier Relationship Management with a focus on security aspects.
• Proficiency in Supplier security management, including risk assessments and contract reviews.

Why join us?

At bp, we support our people to grow in a diverse and exciting environment. We believe that our team is strengthened by diversity. There are many aspects of our employees' lives that are meaningful, so we offer benefits to enable your work to fit with your life.

• flexible working options
• a generous paid parental leave policy
• excellent retirement benefits
• among others!

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Reinvent your career as you help our business meet the challenges of the future.

Travel Requirement Negligible travel should be expected with this role

Remote Type: This position is a hybrid of office/remote working

Relocation Assistance: This role is not eligible for relocation

Future Location Notice: This role will start in Sunbury, London. bp has announced a planned office move to Timber Square, London, with all positions currently advertised in Sunbury, including this one, expected to relocate around Q4 2027-Q1 2028. This presents an exciting opportunity for all employees and leaders to come together in one London location. The specific date of the move will be confirmed closer to the time.

We are an equal opportunity employer. We do not discriminate on the basis of protected characteristics like race, religion, color, sex, national origin, sexual orientation, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp's recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us. If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.

We are an international energy company with global scale, ambitious plans and a team of brilliant people delivering energy to the world, today and tomorrow.