Job Description

Entity:

Technology

Job Family Group:

IT&S Group

You will work within the CT&E Team

This team is responsible for response and management of cyber incidents, using an intelligence-led approach for identification, mitigation, and rapid response to safeguard bp on a global scale. By applying lessons learned and data analytics, this team also establishes engineering principles and improves the technology stack to continuously bolster bp's cybersecurity posture.

Let me tell you about the role

We are looking for a Data Security Engineering Specialist to define, implement, govern, and strengthen our data protection capabilities across our multi-cloud platform, supporting critical business operations. In this role, you will focus on data security with deep technical background in data security capabilities such as DLP, encryption, data governance, DSPM, etc.

The ideal candidate brings a hands-on technical expertise for data security and will partner with the platform engineering, data governance, workplace and other teams to develop and implement resilient data secure posture. You will ensure compliance with industry regulations, safeguard critical data and enable secure integration across diverse business environments. You will play a key role in shaping bp’s data security agenda and in building a culture of data stewardship and protection.

What you will deliver

• Improve and maintain enterprise data security standards and frameworks covering Data Loss Prevention (DLP), data classification, encryption, data retention, data access governance, and monitoring.
• Work with security architects and platform teams to ensure secure-by-default configurations and data handling practices.
• Maintain baselines for data protection tools and technologies across structured and unstructured data.
• Monitor compliance with security standards and policies across business units and platforms; report gaps and recommend remediation strategies.
• Build data security metrics, KPIs, and dashboards to track compliance, maturity, and risk exposure.
• Bring data security innovation to stay ahead of evolving threats, technologies, regulations (e.g., GDPR, HIPAA, CCPA), and industry standards (e.g., NIST, ISO 27001).
• Collaborate across engineering, compliance, privacy, and risk teams to embed data protection principles into business and technical strategies.
• Perform security reviews, identify gaps, and drive continuous improvement in data protection practices across the multi-cloud environment.

What you will need to be successful (experience and qualifications)

• 9+ years of experience in cybersecurity, with at least 5 years specifically in Data Security, including areas such as DLP, data lifecycle governance, privacy engineering, or data classification and handling.
• Strong hands-on expertise with DLP tools (e.g., Microsoft Purview), data security monitoring platforms, and data access governance solutions.
• Deep understanding of the data lifecycle (create, store, use, share, archive, delete) and associated security risks and controls.
• Familiarity with cloud-native data services and how to apply data security controls across AWS, Azure, and hybrid environments.
• Ability to read and write code/scripts to support automation or compliance tooling (e.g., Python, PowerShell, JSON/YAML for IaC).
• Good communication, collaboration and stakeholder engagement skills.

About bp

bp is a global energy business with a purpose to reimagine energy for people and our planet. We aim to be a very different kind of energy company by 2030, helping the world reach net zero and improving people’s lives. We are committed to creating a diverse and inclusive environment where everyone can thrive. Join bp and become part of the team building our future!

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Travel Requirement

Up to 10% travel should be expected with this role

Relocation Assistance:

This role is eligible for relocation within country

Remote Type:

This position is a hybrid of office/remote working

Skills:

Consulting, incident investigation and response, Incident Management, Information Assurance, Information Security, Information security behaviour change, Risk Management, Stakeholder Management, Supplier Relationship Management, Supplier security management

Legal Disclaimer:

We are an equal opportunity employer. We do not discriminate on the basis of protected characteristics like race, religion, color, sex, national origin, sexual orientation, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.