Entity:

Technology

Job Family Group:

IT&S Group

Job Description:

You will work with

This team is responsible for safeguarding the company's digital assets and ensuring robust cyber resilience. They cover various aspects of cybersecurity, including threat and exposure management, security engineering, cyber incident response, security DevOps, and insider threat. Each team has specific responsibilities and areas of focus, collaborating closely with other digital security teams and business units to ensure a cohesive approach to cybersecurity.

Let me tell you about the role

As the Operational Excellence Lead in Counter Threat & Engineering (CT&E) team, you will sit within Security Architecture team and operate as the engine room that turns strategy into consistent execution.

Based in Kuala Lumpur, you will establish a lean PMO rhythm and a clear business‑analysis subject area that prioritizes work safeguards capacity for the most important outcomes, and keeps the organization true to its operating standards.

You’ll champion transparency of work in progress and metrics, maintain (Risk, Assumptions, Issues and Dependencies) RAID and decision logs, track actions and KPIs, and land audit evidence and security engagements on time and to standard.

By simplifying templates and processes and reducing failure demand and handoffs, you’ll drive continuous improvement that elevates CT&E’s performance across projects and initiatives.

What you will deliver

Portfolio management

• Run a transparent portfolio cadence across CT&E teams surface work in progress, dependencies, and risks; publish clear metrics and narrative status for partners and leadership.

• Monitor programme, project and key performance characteristics to improve delivery, compliance and operational reliability; spotlight trends and intervene early where performance drifts.

• Own RAID and Decision logs end-to-end: drive accountable owners, timely closure, and high quality evidence for audits and executive reporting; keep a streamlined audit trail.

• Measure what matters: lead time/throughput, first time right, reopen rate, change failure/rollback rate, audit readiness, and stakeholder satisfaction—using these to guide prioritization.

Business analysis & operational execution

• Translate strategy into executable work: clarify problem statements, define scope and acceptance criteria (Definition of Ready/Done), and break leadership asks into actionable, testable items with measurable outcomes.

• Champion process adherence (e.g., security engagements, investment reviews, audits, MITS/POI requirements and improvement initiatives); surface variances early and lead corrective actions to closure.

• Standardize and simplify artefacts (templates, checklists, playbooks) so teams deliver evidence and outcomes first time right and minimize rework.

Leadership enablement

• Act as an extension of leadership for follow through: coordinate pre reads, own trackers and actions, align stakeholders, and ensure decisions turn into landed outcomes.

• Steer financial rigor: support budget planning, allocation and tracking across projects, platforms and services; provide accurate reporting, control costs, and align spend to business priorities.

• Amplify communication and transparency: maintain a single source of truth (ADO/roadmap dashboards), set expectations and proactively manage stakeholder updates.

What you will need to be successful (experience and qualifications)

• Good in balancing strategic priorities with tactical execution, with proven attention to detail.

• Experience of delivering security projects and programmes.

• Outstanding communication and influence skills, with the ability to engage with a broad range of collaborators and prioritize demands

• Motivated by the challenges of solving sophisticated problems and a passion for making things happen

• Some understanding of cyber security frameworks, standards, and best practices is desirable, but not crucial

• Good written and verbal communication, experience of communicating to different audiences and seniorities in a clear and succinct manner

• Experience working in a large enterprise environment

• Some technical knowledge in delivering security solutions and leading security processes

About bp

bp is a global energy business with a purpose to reimagine energy for people and our planet. We aim to be a very different kind of energy company by 2030, helping the world reach net zero and improving people’s lives. We are committed to creating a diverse and inclusive environment where everyone can thrive. Join bp and become part of the team building our future!

We will ensure that individuals with disabilities are provided with reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Travel Requirement

No travel is expected with this role

Relocation Assistance:

This role is not eligible for relocation

Remote Type:

This position is a hybrid of office/remote working

Skills:

Automation system digital security, Client Counseling, Conformance review, Digital Forensics, Incident management, incident investigation and response, Information Assurance, Information Security, Information security behaviour change, Intrusion detection and analysis, Legal and regulatory environment and compliance, Risk Management, Secure development, Security administration, Security architecture, Security evaluation and functionality testing, Solution Architecture, Stakeholder Management, Supplier security management, Technical specialism

Legal Disclaimer:

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.