Security Program Manager, OT Security

Entity:

Technology

Job Family Group:

IT&S Group

Job Description:

Technology is making a difference in bp’s plans to invest in today’s energy system and help build tomorrows. As an expert community of science, safety and security, as well as digital specialists, our aim is to advance and protect bp. We use our expertise to help improve efficiency, increase effectiveness and harness the transformational potential of digital technologies to deliver value.

Our purpose is to deliver energy to the world today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner!

You will work with

The Operational Technology (OT) Security team secures bp’s process control networks and operational technology (OT) systems. We work with business teams to protect critical physical systems to frontline operations. We compose and enforce security controls and collaborate with site teams to ensure smooth operation of those controls.

Let me tell you about the role

Are you passionate about delivering impactful security solutions that reduce cyber risk and enable the business to operate safely? We’re looking for a driven and experienced Security Program Manager to lead security focused initiatives across our digital and operational technology environments.

Based in Kuala Lumpur this role will work closely with OT Security Operations team to manage a program of change to deploy security solutions to OT sites and drive change activities to improve and simplify processes & technology used to delivery security services.

What You’ll Do

• Lead end-to-end delivery of security programs of change for the OT environment, ensuring outcomes are delivered on time, within scope, and to required quality standards.
• Integrate security requirements into all phases of the program lifecycle, collaborating closely with digital security, engineering, and site-based teams.
• Engage with relevant stakeholders to align program delivery with business  priorities and compliance needs.
• Communicate sophisticated security and technical topics clearly to non‑technical stakeholders, ensuring shared understanding of risks, timelines, and expectations.
• Facilitate cross functional workshops, risk discussions, and planning sessions to coordinate remediation and solution design efforts.
• Build and maintain positive relationships with stakeholders across technology, OT, and Digital Security teams.

What We’re Looking For

• Proven track record delivering technical or security focused‑ projects & programs, within sophisticated multi‑stakeholder environments.
• Project management certification: PMP, PRINCE2, PMI‑ACP. Hands‑on exposure to cybersecurity concepts including risk assessment, vulnerability management, access controls, incident response, and compliance.
• Understanding of core cybersecurity principles, frameworks, and best practices (e.g. ISO 27001, NIST, CIS).
• Strong influencing skills with expertise in managing complex stakeholder groups who have competing priorities.
• Excellent problem-solving skills.

Nice to Have

• Experience delivering security solutions into OT/ICS environment
• Security certifications: Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP)
• Degree in Cyber Security, Information Technology, Engineering, or related field.

About bp

bp is a global energy business with a purpose to reimagine energy for people and our planet. We aim to be a very different kind of energy company by 2030, helping the world reach net zero and improving people’s lives. We are committed to creating a diverse and inclusive environment where everyone can grow and succeed. Join bp and become part of the team building our future!

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Travel Requirement

No travel is expected with this role

Relocation Assistance:

This role is not eligible for relocation

Remote Type:

This position is a hybrid of office/remote working

Skills:

Automation system digital security, Client Counseling, Conformance review, Digital Forensics, Incident management, incident investigation and response, Information Assurance, Information Security, Information security behaviour change, Intrusion detection and analysis, Legal and regulatory environment and compliance, Risk Management, Secure development, Security Administration, Security architecture, Security evaluation and functionality testing, Solution Architecture, Stakeholder Management, Supplier security management, Technical specialism

Legal Disclaimer:

We are an equal opportunity employer. We do not discriminate on the basis of protected characteristics like race, religion, color, sex, national origin, sexual orientation, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.