Operational Security Management Lead (SOC / Cyber Incident Response)

bp; Kuala Lumpur; Hybrid; MYR 180,000 - 300,000; Full time

Job summary

BP is seeking an Operational Security Management Lead to oversee security operations for the Asia region, protecting BP's information assets and coordinating incident response across our business services. This hybrid role blends on-site and remote work.

You will drive incident investigations, develop robust incident management frameworks, advise on risk mitigation, and engage with stakeholders and suppliers to ensure adherence to BP security standards.

Qualifications

• Proven experience in operational security management within a large organisation.
• Expertise in incident investigation, incident management and remediation.
• Strong knowledge of information assurance and information security principles.
• Ability to influence information security behaviour and drive cultural change.
• Robust risk management skills across identification, assessment and mitigation.
• Excellent stakeholder management and interpersonal skills.
• Experience with supplier relationship management and implementing supplier security programs.

Responsibilities

• Lead and manage the operational security posture for BP Asia, ensuring adherence to global security policies and local laws.
• Drive incident investigation and ensure timely remediation.
• Develop and implement incident management frameworks and procedures.
• Provide security consulting to business units on best practices and risk mitigation.
• Lead information assurance activities to protect information assets.
• Promote information security awareness and positive security behaviour.
• Identify, assess and mitigate security risks across the organisation.
• Engage with internal teams and external partners to manage stakeholder relationships.
• Oversee supplier relationship management for security vendors and ensure BP security standards.
• Implement supplier security management programs and supervise third-party security practices.

Skills

Operational Security Management

Incident Investigation

Incident Management

Information Assurance

Information Security

Risk Management

Stakeholder Management

Supplier Relationship Management

Supplier Security Management

Consulting

Job description

Let me tell you about the role

Responsible for delivering information security and risk activities for the specialism, using sophisticated technical capabilities to lead changes to security processes and procedures, review sophisticated security issues, lead security solutions from identification to implementation, ensure alignment to policies, standards and best practices and provide technical expertise to internal and external partners.

Entity

Technology

Job Family Group

IT&S Group

Job Description

Let me tell you about the role

Responsible for delivering information security and risk activities for the specialism, using sophisticated technical capabilities to lead changes to security processes and procedures, review sophisticated security issues, lead security solutions from identification to implementation, ensure alignment to policies, standards and best practices and provide technical expertise to internal and external partners.

Specialisms: Information Security Engineering; Information Security and Risk Management; Operational Security Management; Governance, Risk and Compliance; Forensics and Incident Response Management; Application Information Security.

The Operational Security Management Lead will oversee and improve security operations, ensuring the protection of BP's information assets and handling security incidents effectively within the Asia region.

What You Will Deliver

• Lead and manage the operational security posture for BP Business Service Centre Asia, ensuring adherence to global security policies and local laws.
• Drive incident investigation and resolution processes, acting as a critical point of contact during security incidents and ensuring timely and effective remediation.
• Develop and implement robust Incident Management frameworks and procedures.
• Provide guide Consulting on information security best practices and risk mitigation strategies to various business units.
• Lead all aspects of Information Assurance activities, ensuring the integrity, confidentiality, and availability of information systems.
• Champion Information Security awareness and promote positive information security behaviour across the organization.
• Conduct comprehensive Risk Management activities, identifying, assessing, and mitigating security risks.
• Engage in effective Stakeholder Management, building positive relationships with internal teams and external partners, including good team work.
• Handle Supplier Relationship Management for security-related vendors, ensuring compliance with BP's security standards.
• Implement and be responsible for Supplier security management programs, evaluating and supervising the security practices of third-party vendors.

What you will need to be successful (experience and qualifications)

• Proven experience in Operational Security Management roles, with a strong background in a large, complex organization.
• Expertise in Consulting, incident investigation and resolution, and Incident Management.
• In-depth knowledge of Information Assurance, Information Security principles, and best practices.
• Demonstrated ability to influence Information security behaviour and drive cultural change.
• Strong capabilities in Risk Management, including identification, assessment, and mitigation.
• Excellent Stakeholder Management and interpersonal skills, with the ability to engage effectively with all levels of the organization.
• Experience in Supplier Relationship Management and implementing robust Supplier security management frameworks.

About Bp

bp is a global energy business with a purpose to reimagine energy for people and our planet. We aim to be a very different kind of energy company by 2030, helping the world reach net zero and improving people’s lives. We are committed to creating a diverse and inclusive environment where everyone can thrive. Join bp and become part of the team building our future!

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Travel Requirement

No travel is expected with this role

Relocation Assistance

This role is not eligible for relocation

Remote Type

This position is a hybrid of office/remote working

Skills

Consulting, incident investigation and response, Incident Management, Information Assurance, Information Security, Information security behaviour change, Risk Management, Stakeholder Management, Supplier Relationship Management, Supplier security management

Legal Disclaimer

We are an equal opportunity employer. We do not discriminate on the basis of protected characteristics like race, religion, color, sex, national origin, sexual orientation, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us. If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.