GRC Engineering Lead

Entity:

Technology

Job Family Group:

IT&S Group

Job Description:

Please note that roles based out of SJS or Sunbury will move to Timber Square, Southwark, from Q4 2027.

Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner!

You will work with

As part of the bp’s Global GRC team and Digital Compliance leadership team you will have responsibility for leading bp’s global GRC engineering teams and compliance management services portfolio. You will own the Global GRC technology, AI and data strategies, lead operational teams and oversee delivery squads to drive bp’s GRC capabilities.

The Digital Governance Risk and Compliance organization fosters a culture of transparency, accountability, and trust by promoting good governance, effective risk management, and regulatory compliance. These capabilities help bp balance security with usability, optimize technology investments, and enable bp’s business to meet its compliance obligations in all jurisdictions in which it operates globally.

Let me tell you about the role

As the GRC engineering lead you will be expected to work across teams to develop GRC technology capabilities, drive AI and data strategies and improve the value from GRC and compliance services. You will lead the Global GRC engineering and compliance management team, ensuring bp has the framework, platforms, tools, data and capabilities to meets its GRC obligations.

What you will deliver

• Lead the delivery of the GRC technology strategy and roadmap, working across GRC teams and partnering with technology and business teams.
• Lead the delivery of operational services that underpin GRC and compliance management in bp.
• Continuous control health monitoring capabilities, including the delivery of platforms, tools, data hubs, interfaces and reporting dashboards.
• Lead the development and delivery of a AI-driven GRC strategy. Working across GRC teams to deliver measurable improvements in efficiency and business value.
• Lead the design of the compliance framework for global regulations and industry certifications, including maintenance of applicable risk and control frameworks.
• Lead applicable governance, stakeholder working groups, progress tracking and risk reporting for cyber security compliance.
• Lead continuous improvement initiatives to improve effectiveness and efficiency of the compliance program and applicable policies and controls.
• Manage relationship with in-region stakeholders, business, technology and audit teams.
• Lead, coach, develop and build a resilient and high-performing team fostering a culture of continuous improvement and career progression.

What you will need to be successful (experience and qualifications)

You’ll have a tertiary level education and/or equivalent relevant work experience.

Experience

• Significant technology, platform development and operational delivery capability in similar organization or role.
• Significant experience in a similar cyber security, data, engineering, technology or governance, risk and compliance role for a large multi-national organization
• In depth knowledge of GRC platforms, data engineering and AI
• Understanding or experience of cyber security laws, regulations and industry standards as well as the broader legal & regulatory landscape
• Proven track record in leadership of teams and in establishing and maintaining effective and collaborative partnerships

Leadership and EQ:

• Foster positive team morale and empower team members
• Create an environment where people listen and can speak openly
• Demonstrate strong leadership, uphold bp's code of conduct and values
• Promote a culture of change, agility, and open communication
• Self-aware and able to recognize and manage your impact on others.
• Cultural fluency – you operate across cultural boundaries with sensitivity.

Why join us?

At bp, we support our people to grow in a diverse and exciting environment. We believe that our team is strengthened by diversity.

There are many aspects of our employees’ lives that are meaningful, so we offer benefits to enable your work to fit with your life. These benefits can include flexible working options, a generous paid parental leave policy, excellent retirement benefits, among others!

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Reinvent your career as you help our business meet the challenges of the future. Apply now!

Travel Requirement

Negligible travel should be expected with this role

Relocation Assistance:

This role is not eligible for relocation

Remote Type:

This position is a hybrid of office/remote working

Skills:

Consulting, incident investigation and response, Incident Management, Information Assurance, Information Security, Information security behaviour change, Risk Management, Stakeholder Management, Supplier Relationship Management, Supplier security management

.

Future Location Notice:  This role will start in Sunbury, London. bp has announced a planned office move to Timber Square, London, with all positions currently advertised in Sunbury, including this one, expected to relocate around Q4 2027-Q1 2028. This presents an exciting opportunity for all employees and leaders to come together in one London location. The specific date of the move will be confirmed closer to the time.

Legal Disclaimer:

We are an equal opportunity employer. We do not discriminate on the basis of pr