About this role
Sr Platform Security and Risk Adv (App)
What’s the role? As part of Shell’s Enterprise Risk Services (ERS) team supporting Digital Platforms, this role plays a critical part in embedding secure development practices and strengthening risk and control capabilities across our technology landscape. The successful candidate will bring a blend of GRC (Governance, Risk & Compliance) knowledge with Application Security (AppSec) and AI expertise, product development experience, to help drive Shell’s digital resilience. This role supports the CISO’s Vision 2030 ambitions— Be Competitive, Be Inspired, and Be Resilient— and contributes to our purpose: Protect today, Secure tomorrow.
What you’ll be doing? Operates within established IRM policies, procedures, and defined objectives or agreements, while demonstrating the ability to exercise discretion and make independent adjustments when necessary. Effectively handles complex, ambiguous, and incomplete information. May lead a small team or provide guidance, coaching, and support to colleagues. Demonstrates strong accountability and autonomy in resolving complex issues and assignments, including the ability to investigate, analyze, define, and implement solutions to challenging problems. Collaborates across teams and maintains some level of engagement with business leadership. Works independently with minimal supervision, guided by broad managerial direction.
What we need from you? Mandatory Bachelor’s in Information Technology or related degree. Possesses at least 9 years of experience with a strong GRC mindset, effectively balancing risk, value, and cost considerations, including awareness of AI-related risks. Knowledge of standards/regulations (e.g., NIST, GDPR). Expertise in application security (OWASP, MITRE) and AI risks (bias, drift, adversarial threats). Experience with secure pipelines & supply chain controls (policy-as-code, tools like Apiiro, Dependabot). Threat modeling across cloud, containers, and AI/data workloads. Programming skills (Python/Shell) to automate controls and security. Strong collaboration in Agile environments with business-focused communication. Nice to have: Experience in IT/OT security governance. Familiar with developer platforms (Backstage, Cortex) to scale adoption. Certifications in cloud, DevOps, security, and AI governance.
What we offer You bring your skills and experience to Shell and in return you work with talented, committed people on one of the most important challenges facing our planet. You’ll have the opportunity to develop the skills you need to grow in an environment where we value honesty, integrity, and respect for one another. You’ll be able to balance your priorities as you become the best version of yourself. Progress as a person as we work on the energy transition together. Continuously grow the transferable skills you need to get ahead. Work at the forefront of technology, trends, and practices. Collaborate with experienced colleagues with unique expertise. Achieve your balance in a values-led culture that encourages you to be the best version of yourself. Benefit from flexible working hours, and the possibility of remote/mobile working. Perform at your best with a competitive starting salary and annual performance related salary increase – our pay and benefits packages are considered to be among the best in the world. Take advantage of paid parental leave, including for non-birthing parents. Join an organisation working to become one of the most diverse and inclusive in the world. We strongly encourage applicants of all genders, ages, ethnicities, cultures, abilities, sexual orientation, and life experiences to apply. Grow as you progress through diverse career opportunities in national and international teams. Gain access to a wide range of training and development programmes. We’d like you to know that Shell has a bold goal: to become one of the world’s most diverse and inclusive companies. You can get to know more about how we’re working towards that goal, click here.
DISCLAIMER: Please note: We occasionally amend or withdraw Shell jobs and reserve the right to do so at any time, including prior to the advertised closing date. Before applying, you are advised to read our data protection policy. This policy describes the processing that may be associated with your personal data and informs you that your personal data may be transferred to Shell/Shell Group companies around the world. The Shell Group and its approved recruitment consultants will never ask you for a fee to process or consider your application for a career with Shell. Anyone who demands such a fee is not an authorised Shell representative and you are strongly advised to refuse any such demand. Shell is an Equal Opportunity Employer.