Governance Risk & Compliance Specialist

Entity:

Technology

Job Family Group:

IT&S Group

Job Description:

IT Compliance Specialist – H and I

Role overview

You will work with

This is an IT compliance specialist role in bp’s global Digital Compliance team.

The DGRC organization fosters a culture of transparency, accountability, and trust by promoting good governance, effective risk management, and regulatory compliance.  These capabilities help bp balance security with usability, optimize technology investments, and proactively counter cyber threats.

Let me tell you about the role

bp’s digital compliance team, manages bp’s global IT compliance programs including cyber security, digital resilience, IT SOx, privacy, and manage bp’s policy and compliance framework. As part of this team you will be responsible for delivering a key aspect of that global IT compliance program. You will work as part of a global team supporting all bp’s global businesses and be responsible for delivering services that ensure bp meets its global IT compliance obligations, meets industry standards, delivers contractual requirements and manages bp’s compliance risks.

You will provide advice to digital teams on compliance requirements and IT controls, support them as they operate their services, assess projects and changes to identify compliance risks, support internal and external audits and advise on remediation.

What you will deliver

You will:

• Enable the delivery of the information security and IT compliance program, including the delivery of annual audits and control testing programs.

• Advice on compliance management processes, scope audit and testing approaches for security and IT compliance programs.

• Experience utilizing GRC tools for risk assessments, controls management, policy compliance, issue and remediation tracking, audit management, attestation campaigns, continuous controls monitoring, and regulatory reporting.

• Experience implementing and optimizing technology-enabled compliance processes and integrating GRC solutions with enterprise platforms such as SAP, Azure, ServiceNow, and Identity & Access Management (IAM) solutions.

• Support technology teams through projects and changes as required to identify and manage compliance risks and requisite controls.

• Support regulatory registration, self-assessment and facilitate audit delivery for your region and specialist area of compliance.

• Highlight and deliver continuous improvement initiatives, with a focus accelerating the use of AI and automation to improve effectiveness and efficiency of compliance

• Establish relationships with and monitor performance of key partners in the delivery of compliance.

What you will need to be successful (experience and qualifications)

Education

You’ll have a tertiary level education and/or equivalent relevant work experience.

Experience

• Experience in a similar governance, risk and compliance role for a large-scale organization

• Hands on experience, knowledge and understanding of regulatory requirements, security standards and IT control frameworks

• Ability to provide pragmatic, risk-based compliance advice and constructive challenge to stakeholders.

• Delivery of regulatory compliance, audit and IT control testing programs

• Experience forming effective and collaborative partnerships with other digital teams

• Excellent communication and presentation skills, with the ability to translate complex compliance requirements into business outcomes.

• Strong analytical, problem-solving, and continuous improvement mindset, with a focus on automation and operational excellence.

Leadership and EQ:

• Uphold bp's code of conduct and values

• Promote strong team ethics based on doing the right thing

• Able to apply judgment and common sense – you use insight and good judgment to inform actions and respond to situations as they arise

• Naturally look beyond own area to consider the bigger picture and/or perspective of others

• Self-aware and able to recognize and manage your impact on others.

• Cultural fluency – you operate across cultural boundaries with sensitivity.

Why join bp

Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner! At bp, we support our people to learn and grow in a diverse and high-reaching environment. We are committed to fostering an inclusive environment in which everyone is respected and treated fairly.

Disclaimer

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. Even though the job is advertised as full time, please contact the hiring manager or the recruiter as flexible working arrangements may be considered. We believe that our team is strengthened by diversity. We are committed to crafting an inclusive environment in which everyone is respected and treated fairly. There are many aspects of our employees’ lives that are important, so we offer benefits to enable your work to fit with your life. These benefits can include flexible working options, collaboration spaces in a modern office environment, and many others benefits.

What you can expect from us!

Our commitment to diversity, equity and inclusion: At bp, you could be part of Business Resource Groups (BRGs) which believe in the power of inclusion, deeper connections, and shared experiences. They provide a place for employees to learn and share knowledge, to connect, and to improve. The BRGs focus on and encourage talent engagement, development, and retention while creating a broadened sense of community and inclusion for bp employees. The groups cultivate leadership growth by involving employees in developmental opportunities they would not otherwise have access to. Formal and informal mentoring also helps employees develop their professional goals and connect with colleagues. The BRGs’ dedication to growth at all levels helps employees feel more engaged and energized. The BRGs break down barriers, so we can all do better together. Examples of BRGs include (but are not limited to): bpWIN (bp Women’s International Network) Pride Working parents PEN (Positively Ethnic Network) bpInclusia (bp’s Asian community) bpEnergía (bp’s Latin community)

Travel Requirement

Up to 10% travel should be expected with this role

Relocation Assistance:

This role is eligible for relocation within country

Remote Type:

This position is a hybrid of office/remote working

Skills:

Consulting, Digital Transformation, Enterprise Platforms, GRC Platform, incident investigation and response, Incident Management, Information Assurance, Information Security, Information security behaviour change, IT Compliance Management, IT Controls, Risk Management, Risk Management Assessment, Stakeholder Management, Supplier Relationship Management, Supplier security management, Technology Compliance

.

Legal Disclaimer:

We are an equal opportunity employer. We do not discriminate on the basis of protected characteristics like race, religion, color, sex, national origin, sexual orientation, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.