Security Lead, Cyber Resilience & Risk Strategy

BP; United Kingdom; Sur place; GBP 70 000 - 100 000; Plein temps

Avantages offerts par ce poste

Flexible working

Parental leave

Retirement benefits

Résumé du poste

bp is seeking a security-focused professional to lead the delivery of digital security initiatives within the ST&S portfolio. You will act as the main contact for security inquiries, provide technical leadership, and implement security operating processes in line with standards.

Responsibilities include risk assessment, incident response, and embedding security into product development and business operations, driving cyber hygiene across digital ecosystems.

Qualifications

• Degree in Information Security or equivalent.
• CISM or CISSP or working towards certification.
• Knowledge of ISO 27001/2, NIST, CIS framework is helpful.
• Proven track record in information security roles, leading teams.
• Strong ability to communicate technical concepts to diverse audiences.
• Deep technical knowledge with security solution delivery.
• Experience balancing business needs with security and operations.

Responsabilités

• Lead delivery of security activities to ensure business value.
• Act as main security contact within ST&S portfolio.
• Develop and implement security measures aligned to standards.
• Prioritize cyber and operational safety and improve controls.
• Collaborate with teams to embed security in product development.
• Coordinate remediation from vulnerability scans and audits.

Connaissances

Security leadership

CISM

CISSP

ISO 27001

NIST

Risk management

Project management

Stakeholder management

Communication

Cyber security

Formation

BSc Information Security

Description du poste

bp is seeking a security-focused professional to lead the delivery of digital security initiatives within the ST&S portfolio. You will act as the main contact for security inquiries, provide technical leadership, and implement security operating processes in line with standards.

Responsibilities include risk assessment, incident response, and embedding security into product development and business operations, driving cyber hygiene across digital ecosystems.