Head of Information Security and Risk (CISO) - Castrol

Posted:
8/18/2026, 8:40:55 PM

Experience Level(s):
Expert or higher ⋅ Senior

Field(s):
IT & Security

Workplace Type:
Hybrid

Job Family Group:

IT&S Group


Job Description:

PLEASE FIND ATTACHED

Castrol is seeking an experienced, commercially astute and highly credible Chief Information Security and Risk (CISO) to lead and continuously evolve its global cyber security, information security, resilience, risk and compliance capabilities.

As a member of the Digital Leadership Team, the CISO will be accountable for protecting Castrol's information assets, digital platforms, operational technologies, data and business services through the development and execution of a comprehensive cyber security strategy, operating model and risk management framework.

The CISO will provide strategic leadership and operational oversight across all aspects of cyber security, ensuring Castrol maintains a resilient, secure and compliant technology environment whilst enabling business growth, innovation and digital transformation. The role will ensure the organisation remains responsive to an increasingly complex cyber threat landscape, evolving regulatory requirements and emerging risks associated with Artificial Intelligence and other digital technologies.

A critical priority for the role will be the successful planning and execution of all security-related activities associated with Castrol's separation from BP and the delivery of the TSA Exit programme. This includes establishing Castrol's standalone security capability, transitioning cyber services and security operations, managing separation-related risks, and ensuring continuity of service, regulatory compliance and cyber resilience throughout the transition.

The successful candidate will possess a deep understanding of the BP operating environment, technology estate, security controls, governance frameworks and supplier ecosystem, leveraging this knowledge to support a seamless and secure transition to Castrol's future-state operating model.

This is a senior executive leadership position requiring an individual who can operate effectively in the Boardroom, during major cyber incidents, and within complex technology transformation programmes. The successful candidate will combine strategic vision, operational excellence, deep cyber security expertise and transformational leadership to build, lead and protect Castrol's global cyber security capability while delivering one of the organisation's most significant business and technology change agendas.


Travel Requirement:

Up to 10% travel should be expected with this role


Relocation Assistance:

This role is not eligible for relocation


Remote Type:

This position is a hybrid of office/remote working


Skills:

Consulting, incident investigation and response, Incident Management, Information Assurance, Information Security, Information security behaviour change, Risk Management, Stakeholder Management, Supplier Relationship Management, Supplier security management

.


Legal Disclaimer:

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.