Digital Security GRC Platform Owner

Organization: bpx Energy – Technology/Enterprise Architecture/Digital Security 
 

Role Summary 

The GRC Platform Owner is responsible for end-to-end ownership and continuous improvement of bpx’s Digital Security Governance, Risk, and Compliance (GRC) processes and platforms. This role ensures governance activities are efficient, scalable, and aligned with enterprise policies, while enabling delivery teams to operate within defined guardrails. 

Key Responsibilities 

Platform & Process Ownership 

- Own and evolve GRC platform ecosystem requirements (ServiceNow / ADO and supporting tools) 
- Design and maintain standardized GRC processes 
- Drive automation and simplification 
 
Governance & Decision Authority 

- Serve as primary decision authority 
- Define required level of control 
- Enforce governance policies 

Conformance Reporting 

- Identify conformance reporting requirements and recipients 
- Deliver conformance reporting, as required 
 
Cross-Functional Leadership 

- Coordinate across Digital Security, EA, delivery teams, procurement 
- Guide teams through requirements 
 
Risk Management & Advisory 

- Coordinate the evaluation of solutions and vendors for risk 
- Provide risk-informed recommendations 
- Provide risk-informed approvals for new systems, integrations, and changes 
 
Product & Backlog Ownership 

- Own GRC backlog and roadmap 
- Prioritize enhancements 

 
Process Definition & Documentation 

- Develop and maintain GRC procedures and frameworks 
- Ensure clarity and accessibility 
 
Performance & Continuous Improvement 

- Track cycle time and quality metrics 
- Drive improvements 

Qualifications & Experience 

- Combined 10 years' experience (minimum 2 each) in 

• GRC in combined IT and OT environments 

•  Analytics, metrics and proce