Governance Risk & Compliance Specialist

BP PLC; Pune District; Hybrid; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Relocation assistance

Hybrid work arrangement

Job summary

bp seeks an IT Compliance Specialist to join the global Digital Compliance team. You will support BP’s IT compliance programs covering cyber security, IT SOx, privacy, and policy governance.

You will advise digital teams on compliance requirements, assess projects for risk, and assist audits and remediation across bp's global operations. You will drive continuous improvement, use AI to increase efficiency, and coordinate with partners for audits and regulatory reporting.

Qualifications

• University-level education or equivalent work experience.
• Hands-on knowledge of regulatory requirements and IT control frameworks.
• Ability to provide pragmatic, risk-based compliance advice to stakeholders.
• Experience delivering regulatory compliance, audits and IT control testing programs.
• Proven ability to collaborate with digital teams and drive improvement.

Responsibilities

• Enable delivery of IT compliance programs, including audits and control testing.
• Advise on compliance management processes and audit scoping for security and IT controls.
• Utilize GRC tools for risk assessments, controls management, and regulatory reporting.
• Implement and optimize compliance processes, integrating GRC with SAP, Azure and IAM.
• Support projects to identify and manage compliance risks and required controls.
• Support regulatory registration, self-assessment, and audit delivery for regions.
• Highlight continuous improvement and use of AI/automation to enhance compliance.

Skills

GRC tools

Regulatory compliance

Audit management

IT controls

Risk assessments

Education

Tertiary level education

Tools

SAP

Azure

ServiceNow

Identity & Access Management

Job description

Entity: Technology Job Family Group: IT&S Group Job Description: IT Compliance Specialist – H and I

Role overview

This is an IT compliance specialist role in bp’s global Digital Compliance team. The DGRC organization fosters a culture of transparency, accountability, and trust by promoting good governance, effective risk management, and regulatory compliance. These capabilities help bp balance security with usability, optimize technology investments, and proactively counter cyber threats.

Let me tell you about the role bp’s digital compliance team, manages bp’s global IT compliance programs including cyber security, digital resilience, IT SOx, privacy, and manage bp’s policy and compliance framework. As part of this team you will be responsible for delivering a key aspect of that global IT compliance program. You will work as part of a global team supporting all bp’s global businesses and be responsible for delivering services that ensure bp meets its global IT compliance obligations, meets industry standards, delivers contractual requirements and manages bp’s compliance risks. You will provide advice to digital teams on compliance requirements and IT controls, support them as they operate their services, assess projects and changes to identify compliance risks, support internal and external audits and advise on remediation.

What you will deliver

• Enable the delivery of the information security and IT compliance program, including the delivery of annual audits and control testing programs.
• Advice on compliance management processes, scope audit and testing approaches for security and IT compliance programs.
• Experience utilizing GRC tools for risk assessments, controls management, policy compliance, issue and remediation tracking, audit management, attestation campaigns, continuous controls monitoring, and regulatory reporting.
• Experience implementing and optimizing technology-enabled compliance processes and integrating GRC solutions with enterprise platforms such as SAP, Azure, ServiceNow, and Identity & Access Management (IAM) solutions.
• Support technology teams through projects and changes as required to identify and manage compliance risks and requisite controls.
• Support regulatory registration, self-assessment and facilitate audit delivery for your region and specialist area of compliance.
• Highlight and deliver continuous improvement initiatives, with a focus accelerating the use of AI and automation to improve effectiveness and efficiency of compliance.
• Establish relationships with and monitor performance of key partners in the delivery of compliance.

What you will need to be successful (experience and qualifications)

• Education: You’ll have a tertiary level education and/or equivalent relevant work experience.
• Experience in a similar governance, risk and compliance role for a large-scale organization.
• Hands on experience, knowledge and understanding of regulatory requirements, security standards and IT control frameworks.
• Ability to provide pragmatic, risk-based compliance advice and constructive challenge to stakeholders.
• Delivery of regulatory compliance, audit and IT control testing programs.
• Experience forming effective and collaborative partnerships with other digital teams.
• Excellent communication and presentation skills, with the ability to translate complex compliance requirements into business outcomes.
• Strong analytical, problem-solving, and continuous improvement mindset, with a focus on automation and operational excellence.
• Leadership and EQ: Uphold bp's code of conduct and values Promote strong team ethics based on doing the right thing Able to apply judgment and common sense – you use insight and good judgment to inform actions and respond to situations as they arise Naturally look beyond own area to consider the bigger picture and/or perspective of others Self-aware and able to recognize and manage your impact on others.
• Cultural fluency – you operate across cultural boundaries with sensitivity.

Why join bp

Our purpose is to deliver energy to the world, today and tomorrow.

For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner!

At bp, we support our people to learn and grow in a diverse and high-reaching environment. We are committed to fostering an inclusive environment in which everyone is respected and treated fairly.

Disclaimer We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. Even though the job is advertised as full time, please contact the hiring manager or the recruiter as flexible working arrangements may be considered. We believe that our team is strengthened by diversity. We are committed to crafting an inclusive environment in which everyone is respected and treated fairly. There are many aspects of our employees’ lives that are important, so we offer benefits to enable your work to fit with your life. These benefits can include flexible working options, collaboration spaces in a modern office environment, and many others benefits.

What you can expect from us!

Our commitment to diversity, equity and inclusion: At bp, you could be part of Business Resource Groups (BRGs) which believe in the power of inclusion, deeper connections, and shared experiences. They provide a place for employees to learn and share knowledge, to connect, and to improve. The BRGs focus on and encourage talent engagement, development, and retention while creating a broadened sense of community and inclusion for bp employees.

The groups cultivate leadership growth by involving employees in developmental opportunities they would not otherwise have access to. Formal and informal mentoring also helps employees develop their professional goals and connect with colleagues. The BRGs’ dedication to growth at all levels helps employees feel more engaged and energized. The BRGs break down barriers, so we can all do better together.

Examples of BRGs include (but are not limited to): bpWIN (bp Women’s International Network) Pride Working parents PEN (Positively Ethnic Network) bpInclusia (bp’s Asian community) bpEnergía (bp’s Latin community)

Travel Requirement

Up to 10% travel should be expected with this role

Relocation Assistance

This role is eligible for relocation within country

Remote Type

This position is a hybrid of office/remote working

Skills

• Consulting, Digital Transformation, Enterprise Platforms, GRC Platform, incident investigation and response, Incident Management, Information Assurance, Information Security, Information security behaviour change, IT Compliance Management, IT Controls, Risk Management, Risk Management Assessment, Stakeholder Management, Supplier Relationship Management, Supplier security management, Technology Compliance

Legal Disclaimer

We are an equal opportunity employer. We do not discriminate on the basis of protected characteristics like race, religion, color, sex, national origin, sexual orientation, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us. If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks. We’re an international energy company with global scale, ambitious plans and a team of brilliant people delivering energy to the world, today and tomorrow.