Data Security Engineering Specialist

Entity:

Technology

Job Family Group:

IT&S Group

Job Description:

Job Description

You will work within the CT&E Team

This team is responsible for response and management of cyber incidents, using an intelligence-led approach for identification, mitigation, and rapid response to safeguard bp on a global scale. By applying lessons learned and data analytics, this team also establishes engineering principles and improves the technology stack to continuously bolster bp's cybersecurity posture.

Let me tell you about the role

We are looking for a Data Security Engineering Specialist to define, implement, govern, and strengthen our data protection capabilities across our multi-cloud platform, supporting critical business operations. In this role, you will focus on data security with deep technical background in data security capabilities such as DLP, encryption, data governance, DSPM, etc.

The ideal candidate brings a hands-on technical expertise for data security and will partner with the platform engineering, data governance, workplace and other teams to develop and implement resilient data secure posture. You will ensure compliance with industry regulations, safeguard critical data and enable secure integration across diverse business environments. You will play a key role in shaping bp’s data security agenda and in building a culture of data stewardship and protection.

What you will deliver

• Improve and maintain enterprise data security standards and frameworks covering Data Loss Prevention (DLP), data classification, encryption, data retention, data access governance, and monitoring, with a mandatory focus on securing AWS and Azure cloud environments.
• Work with security architects and platform teams to ensure secure-by-default configurations and data handling practices across AWS, Azure, and saas platforms.
• Maintain baselines for data protection tools and technologies across structured and unstructured data, including modern data platforms. 
• Monitor compliance with security standards and policies across business units and platforms; report gaps and recommend remediation strategies.
• Build data security metrics, KPIs, and dashboards to track compliance, maturity, and risk exposure.
• Bring data security innovation to stay ahead of evolving threats, technologies, regulations (e.g., GDPR, HIPAA, CCPA), and industry standards (e.g., NIST, ISO 27001) including advancements in AI security and the use of AI in security operation.
• Collaborate across engineering, compliance, privacy, and risk teams to embed data protection principles into business and technical strategies.
• Perform security reviews, identify gaps, and drive continuous improvement in data protection practices across the multi-cloud environment.

What you will need to be successful (experience and qualifications)

• 9+ years of experience in cybersecurity, with at least 4 years specifically in Data Security, including areas such as DLP, data protection engineering, and handling of sensitive data in hybrid and cloud environment.
• Mandatory expertise in cloud security across AWS and Azure, including implementation of data protection controls in cloud-native environments.
• experience working with modern data platforms such as Databricks, Azure Synapse, and AWS Redshift or Palantir with a focus on securing data pipelines and analytical workloads.
• Strong understanding of database security concepts including Row-Level Security (RLS), Column-Level Security (CLS), and Data Security Posture Management (DSPM).
• Strong understanding of data encryption, key management, network/data segmentation, and Zero Trust principles.
• Familiarity with cloud-native data services and how to apply data security controls across AWS, Azure, and hybrid environments.
• Ability to read and write code/scripts to support automation or compliance tooling (e.g., Python, PowerShell, JSON/YAML for IaC).
• experience with data governance tools such as Databricks Unity Catalog, Microsoft Purview Data Map, and ETL processes is good to have
• Exposure to AI security and the application of AI in enhancing security capabilities. would be added advantage
• Good communication, collaboration and stakeholder engagement skills

About bp

bp is a global energy business with a purpose to reimagine energy for people and our planet. We aim to be a very different kind of energy company by 2030, helping the world reach net zero and improving people’s lives. We are committed to creating a diverse and inclusive environment where everyone can thrive. Join bp and become part of the team building our future!

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Travel Requirement

Up to 10% travel should be expected with this role

Relocation Assistance:

This role is eligible for relocation within country

Remote Type:

This position is not available for remote working

Skills:

Azure Synapse Analytics, Cloud Security, Data Loss Prevention (DLP), Microsoft Azure Databricks

Legal Disclaimer:

We are an equal opportunity employer. We do not discriminate on the basis of protected characteristics like race, religion, color, sex, national origin, sexual orientation, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.