Compliance Specialist (SOX)

bp; Houston (TX); Hybrid; USD 110,000 - 150,000; Full time

Job summary

bp is seeking an IT compliance specialist to strengthen the global IT compliance program, delivering IT SOx audits, controls testing, and advisory support to digital teams. You will assess projects for compliance risks and assist with audits and remediation efforts to balance security with usability.

The role emphasizes collaboration across digital functions, regulatory awareness, and a drive to leverage AI and automation to improve control effectiveness and efficiency.

Qualifications

• GRC experience in a large-scale organisation.
• Hands-on IT controls knowledge, including SOx.
• Delivery of regulatory compliance, IT audit and control testing programs.
• Experience forming effective partnerships with digital teams.

Responsibilities

• Deliver key aspects of the global IT compliance program, including IT SOx.
• Advise digital teams on compliance requirements and IT controls.
• Assess projects and changes to identify compliance risks.
• Support external audits and remediation activities.
• Drive continuous improvement, including AI/automation for controls.

Skills

Governance & Risk

IT Controls (SOx)

IT Audit & Controls Testing

Stakeholder Collaboration

Regulatory Compliance

Education

Bachelor's degree or equivalent

Job description

Entity

Technology

Job Family Group

IT&S Group

Job Description

About us
Our purpose is to bring together people, energy and markets to power and navigate a changing world. In a time of constant change and possibility we need new talent to pursue commercial opportunities, fueled by world-class insight and expertise. We're always striving for more innovative digital solutions, sustainable outcomes and closer collaboration across our company and beyond, and you could be part of that too. Together we continue to grow as the world's leading energy company!

Role Overview

You will work with

This is an IT compliance specialist role in bp's global Digital Compliance team.

The DGRC organisation fosters a culture of transparency, accountability, and trust by promoting good governance, effective risk management, and regulatory compliance. These capabilities help bp balance security with usability, optimize technology investments, and proactively counter cyber threats.

Let Me Tell You About The Role

As part of the digital compliance team, you are responsible for delivering key aspects of the global IT compliance program including IT SOx (Sarbanes Oxley). You will provide advice to digital teams on compliance requirements and IT controls, support them as they operate their services, assess projects and changes to identify compliance risks, support them through external audits and advise on remediation.

You Will

What you will deliver

• Enable the delivery of the IT compliance program, including the delivery of annual audits and control testing programs (including IT SOx).
• Support regulatory registration, self-assessment and facilitate audit delivery for your region and specialist area of compliance,
• Advise on compliance management, audit and testing approach for IT SOx and other compliance programs
• Support technology teams through projects and changes as required to identify and manage compliance risks
• Highlight and deliver continuous improvement initiatives, with a focus on how we can use AI and automation to improve effectiveness and efficiency of controls
• Establish relationships with and monitor performance of key partners in the delivery of compliance.

What you will need to be successful (experience and qualifications)

Education

You’ll have a tertiary level education and/or equivalent relevant work experience.

Experience

• Experience in a similar governance, risk and compliance role for a large-scale organisation
• Hands on experience, knowledge and understanding of IT controls including SOx
• Delivery of regulatory compliance, IT audit and control testing programs
• Experience forming effective and collaborative partnerships with other digital teams

Leadership And EQ

• Uphold bp's code of conduct and values
• Promote strong team ethics based on doing the right thing
• Able to apply judgment and common sense – you use insight and good judgment to inform actions and respond to situations as they arise
• Naturally look beyond own area to consider the bigger picture and/or perspective of others
• Self-aware and able to recognize and manage your impact on others.
• Cultural fluency – you operate across cultural boundaries with sensitivity.

Why Join Bp

At bp, we support our people to learn and grow in a diverse and challenging environment. We believe that our team is strengthened by diversity. We are committed to encouraging an inclusive environment in which everyone is respected and treated fairly.

There are many aspects of our employees’ lives that are meaningful, so we offer benefits to enable your work to fit with your life. These benefits can include flexible working options, a generous paid parental leave policy, and excellent retirement benefits, among others!

Travel Requirement

Up to 10% travel should be expected with this role

Relocation Assistance

This role is not eligible for relocation

Remote Type

This position is a hybrid of office/remote working

Skills

Consulting, incident investigation and response, Incident Management, Information Assurance, Information Security, Information security behaviour change, Risk Management, Stakeholder Management, Supplier Relationship Management, Supplier security management

Legal Disclaimer

We are an equal opportunity employer. We do not discriminate on the basis of protected characteristics like race, religion, color, sex, national origin, sexual orientation, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp's recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending on your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.