Information security engineering principal

Entity:

Technology

Job Family Group:

IT&S Group

Job Description:

You will work with

This team is responsible for response and management of cyber incidents, utilizing an intelligence-led approach for identification, mitigation, and rapid response to safeguard bp on a global scale. By applying lessons learned and data analytics, they establish engineering principles and enhance the technology stack to continuously bolster bp’s cybersecurity posture.

Let me tell you about the role

We are looking for Principal Information Security Engineer who will be responsible for leading and coaching a team dedicated to defining security policies, uncovering vulnerabilities, identifying non-compliances, and reporting those finds, in a scalable way, to continuously improve bp’s security posture across cloud environments, infrastructure and data.

You will advocate for and ensure that digital delivery teams adhere to defined security standards.

You will provide leading insight of industry and technology trends and best practices to shape bp’s security agenda and create a culture of excellence.

What you will deliver

• Align strategy, processes, and decision-making across teams.

• Set clear expectations with individuals based on their level and role and aligned to the broader organization’s goals. Meet regularly with individuals to discuss performance and development and provide feedback and coaching.

• Create positive engagement and governance framework and drive an inclusive work environment with teams and collaborators including platform owners, product owners, product managers and portfolio managers.

• Evolve the security roadmap to meet anticipated future requirements and needs.

• Provide support to the squads and teams providing technical guidance, managing dependencies and risks.

• Set and implement cloud, infrastructure and data security standards, co-design schemas, ensure quality at the source of infrastructure build and configuration, and find opportunities to (semi-) automate manual secure processes wherever possible.

• Work with business partners to implement secure platform and infrastructure strategies and to coordinate remediation activities to ensure products meet business requirements, by reporting findings and providing actionable recommendations to mitigate risks and enhance security posture.

• Create and articulate materials on how to embed and measure security in cloud, infrastructure, and data spaces.

• Present results to peers and senior management to influence decision making.

• Actively sponsor and mentor emerging talent and promote a culture of continuous development.

What you will need to be successful (experience and qualifications)

• Seasoned senior leadership professional with 10+ years of experience leading, growing and developing a security engineering team, with a minimum or 5 years of relevant security experience on cloud and infrastructure.

• Firm foundation of information and cyber security principles and standard processes.

• Deep and hands-on experience designing security architectures and solutions for reliable and scalable data infrastructure, cloud and data products in complex environments.

• Track record of partner management and communication with senior leadership.

• Experience in a technical leadership role, overseeing projects.

• Experience securing complex, multi-cloud or hybrid environments.

• Experience in DLP and other technologies that can help scale Data Security.

• Experience in Infrastructure security across different areas (IAM, Network, Endpoint, etc)

• Hands-on delivery using object-oriented programming languages (e.g., Python, Scala, Java, C#) and/or in one or more cloud environments (including AWS, Azure, Alibaba, etc.)

• Exposure/experience with full stack development.

• Deep proficiency in technologies across all data lifecycle stages.

• Strong collaborator management and ability to lead teams through managerial and technical influence.

• Continuous learning and improvement approach.

About bp

bp is a global energy business with a purpose to reimagine energy for people and our planet. We aim to be a very different kind of energy company by 2030, helping the world reach net zero and improving people’s lives. We are committed to creating a diverse and inclusive environment where everyone can thrive. Join bp and become part of the team building our future!

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Travel Requirement

Negligible travel should be expected with this role

Relocation Assistance:

This role is eligible for relocation within country

Remote Type:

This position is a hybrid of office/remote working

Skills:

Automation system digital security, Client Counseling, Conformance review, Digital Forensics, Incident management, incident investigation and response, Information Assurance, Information Security, Information security behaviour change, Intrusion detection and analysis, Legal and regulatory environment and compliance, Risk Management, Secure development, Security administration, Security architecture, Security evaluation and functionality testing, Solution Architecture, Stakeholder Management, Supplier security management, Technical specialism

Legal Disclaimer:

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.