Senior Auditor
17 days ago
Sunbury-on-Thames
Entity: Finance Job Family Group: Audit Group Job Description: Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner. The Senior Auditor role can help you achieve such goals through leading or being a team member on a range of audits across different bp entities, with a particular focus on digital and cyber security. The role also presents opportunities to contribute to the development of the annual audit programme, work with senior partners, maintain an understanding of developments impacting digital in bp, coach auditors, and participate in various activities related to the continuous improvement of the Internal Audit function. Internal Audit’s mission is to “make BP safer and more valuable through our independent insights”. We do this through: * A programme of ~120 audits per year that consider the management of BP’s significant risks * Working with management to develop ways to better manage risk * Engaging with various bp entities to develop working relationships * Reporting our results, insights and agreed actions to leadership. We are a global and diverse team of around 130 people, based predominantly in Sunbury, Houston, Budapest, Kuala Lumpur and Baku. The key areas of focus for Information Technology (IT) Audit include the following digital risk areas: * Cyber security with a focus on network and platform infrastructure security * Compliance with cyber and technology regulations, payment card industry standards * Development, deployment and maintenance of critical IT systems * Risk management over enduring and emerging technology The role represents an excellent opportunity for you to develop industry-leading internal audit skills, learn new technology, and improve risk management in BP; while broadening your knowledge and understanding of bp’s businesses and operation. The role is open to individuals with Information Technology risk assurance experience. In-house training will be provided for you to develop auditing, business and leadership skills. As an audit lead, the Senior Auditor will: * Identify and understand relevant risks and controls for each audit; and develop a Terms of Reference and test plan to audit these effectively * Apply experience and subject matter expertise to provide insights to improve how risks are managed provide and identify process and performance improvement opportunities * Lead discussions with auditees and other senior partners in the execution and reporting of audit fieldwork * Manage relationships with business partners, delivering updates on progress of audit work * Lead, motivate and engage the audit team to ensure quality execution of testing and conformance with Internal Audit methodology and requirements * Manage issues as they arise during audit work, raising to the senior audit manager and VP as necessary * Write reports and communicate audit findings professionally, and with respect, to audit and business partners. As an audit team member, the Senior Auditor will: * Conduct audit fieldwork with rigor in line with Internal Audit’s methodology * Apply experience and subject matter expertise to audit test areas assigned * Support the lead auditor and other team members as required to ensure effective and timely audit delivery * Provide coaching to other team members * Engage with business partners professionally and sensitively, and act as an ambassador for Internal Audit. Other Accountabilities – Non-audit work: In addition to audit accountabilities, the Senior Auditor will lead or contribute to other functional activities within Internal Audit, such as: * Supporting the assessment and reporting on the control environment for key risk areas for the purposes of executive and board reporting * Planning for future years audit programmes * Development and delivery of learning & development activities * Maintaining effective working relationships with business partners * Continuing to enhance Internal Audit’s methodology for key digital and cyber security risks. Expected behaviours: * Role modelling conformance with the bp requirements and processes * Role modelling bp’s ‘Who We Are’ beliefs * Contributing to HSSE management, Diversity & Inclusion, Ethics & Compliance and other management activities within Internal Audit. Education: * Suitably qualified professional with degree, or similar educational background, or extensive relevant work experience. Role Requirements: * The ability to translate complex and technical information into clear business language that articulates findings, associated risks and actions. * Deep technical experience in design/ operation in areas such as information technology architecture, cloud, network, digital product/platform development, cybersecurity * Relevant IT risk and control experience (in network security, IT risk or consulting roles) within bp, a similar company or within a relevant professional services organization * Knowledge and understanding of current and emerging IT risk trends, threats, vulnerabilities and mitigations * Team lead experience and working / leading virtual and/or global teams * A proven track record of delivery of audits, relevant risk and controls projects, or line work * Strong verbal and written communication skills and the ability to land exciting messages * The ability to learn quickly and identify key risks and controls in unfamiliar business environments * To work independently and manage uncertainty * The ability to navigate the organisation with tact and manage relationships at different levels including senior leaders# Desirable Criteria: * Audit experience including network and infrastructure security, payment card industry compliance, IT general controls, cyber security and regulatory compliance Travel Requirement Up to 25% travel should be expected with this role Relocation Assistance: This role is not eligible for relocation Remote Type: This position is a hybrid of office/remote working Skills: Agility core practices, Analytical Thinking, Decision Making, Digital Fluency, Influencing, Internal Auditing, Managing change, Managing volatility, Negotiating, Organizational Knowledge, Organizational Savvy, Regional perspective, Reporting, Risk Management, Stakeholder Engagement, Stakeholder Management, Strategic Thinking Legal Disclaimer: We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please ___. If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.