Compliance Specialist (SOX)

bp•Houston, TX

8d•Hybrid

About The Position

This is an IT compliance specialist role in bp’s global Digital Compliance team. The DGRC organisation fosters a culture of transparency, accountability, and trust by promoting good governance, effective risk management, and regulatory compliance. These capabilities help bp balance security with usability, optimize technology investments, and proactively counter cyber threats. As part of the digital compliance team, you are responsible for delivering key aspects of the global IT compliance program including IT SOx (Sarbanes Oxley). You will provide advice to digital teams on compliance requirements and IT controls, support them as they operate their services, assess projects and changes to identify compliance risks, support them through external audits and advise on remediation.

Requirements

Tertiary level education and/or equivalent relevant work experience.
Experience in a similar governance, risk and compliance role for a large-scale organisation
Hands on experience, knowledge and understanding of IT controls including SOx
Delivery of regulatory compliance, IT audit and control testing programs
Experience forming effective and collaborative partnerships with other digital teams
Uphold bp's code of conduct and values
Promote strong team ethics based on doing the right thing
Able to apply judgment and common sense – you use insight and good judgment to inform actions and respond to situations as they arise
Naturally look beyond own area to consider the bigger picture and/or perspective of others
Self-aware and able to recognize and manage your impact on others.
Cultural fluency – you operate across cultural boundaries with sensitivity.
Consulting
incident investigation and response
Incident Management
Information Assurance
Information Security
Information security behaviour change
Risk Management
Stakeholder Management
Supplier Relationship Management
Supplier security management

Responsibilities

Enable the delivery of the IT compliance program, including the delivery of annual audits and control testing programs (including IT SOx).
Support regulatory registration, self-assessment and facilitate audit delivery for your region and specialist area of compliance.
Advise on compliance management, audit and testing approach for IT SOx and other compliance programs
Support technology teams through projects and changes as required to identify and manage compliance risks
Highlight and deliver continuous improvement initiatives, with a focus on how we can use AI and automation to improve effectiveness and efficiency of controls
Establish relationships with and monitor performance of key partners in the delivery of compliance.