I&S Security Assurance Manager

Entity:
Technology Job Family Group: HSSE Group

Job Description:

Please note that roles based out of SJS or Sunbury will move to Timber Square, Southwark, from Q4 2027.Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering.

Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner!

Role Purposebp's Board Governance Principles require an effective System of Internal Control, supported by the Three Lines of Defence (3

LoD) model. Within this framework, the Security Assurance team operates as the Second Line of Defence, providing independent oversight of security risk management across the business.

As Security Assurance Manager, you will evaluate the effectiveness of security controls, identify risks and improvement opportunities, and provide independent assurance that supports informed decision-making. You will work across bp's global operations to strengthen security risk management, enhance governance, and promote continuous improvement.

What you'll do Deliver risk-based assurance activities across bp businesses, assets, and programmes.

Assess compliance, control effectiveness, security barriers, and risk management maturity.

Identify trends, systemic risks, capability gaps, and opportunities for improvement.

Develop assurance insights and recommendations that strengthen security risk management.

Track corrective actions and support the timely resolution of identified issues.

Collaborate with business leaders, security teams, Internal Audit, and assurance partners to align assurance activities and share best practice.

Support security assurance input into major projects and business initiatives.

Prepare reports and present findings to leadership, governance forums, and key stakeholders.

Escalate material risks, control weaknesses, and emerging issues to support effective decision-making.

Contribute to continuous improvement, organisational learning, and assurance capability development.

What you'll bring

Essential

Experience in security, risk management, assurance, audit, governance, or a related discipline.

Strong understanding of risk management frameworks, controls, and assurance methodologies.

Ability to analyse complex information and provide evidence-based recommendations.

Experience influencing and engaging senior stakeholders.

Strong written and verbal communication skills.

Experience working across complex, global, or high-risk environments

Preferred

Professional qualification in security, risk management, assurance, governance, or audit.

Experience in the energy sector or another high-hazard industry.

Knowledge of intelligence and security risk management practices.

Why join us?

At bp, we support our people to grow in a diverse and exciting environment. We believe that our team is strengthened by diversity.

There are many aspects of our employees’ lives that are meaningful, so we offer benefits to enable your work to fit with your life. These benefits can include flexible working options, a generous paid parental leave policy, excellent retirement benefits, among others!

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Reinvent your career as you help our business meet the challenges of the future. Apply now!

Travel Requirement Up to 50% travel should be expected with this role Relocation Assistance:

This role is not eligible for relocation

Remote Type:

This position is a hybrid of office/remote working

Skills:

Accounting for people, Accounting for people, Agility core practices, Close security protection, Communication, Crisis and emergency response management, Digital Fluency, Extortion prevention and response, Information Security, Insider Risk, Intelligence for…