About this role
About the Role As part of Shell’s Enterprise Risk Services (ERS) team supporting Digital Platforms, this role plays a critical part in embedding secure development practices and strengthening risk and control capabilities across our technology landscape. The successful candidate will bring a blend of GRC knowledge with Application Security (AppSec) and AI expertise, product development experience, to help drive Shell’s digital resilience. This role supports the CISO’s Vision 2030 ambitions— ‘Be Competitive’, ‘Be Inspired’, and ‘Be Resilient’—and contributes to our purpose: ‘Protect today, Secure tomorrow’.
What You'll Do
- Operates within established IRM policies, procedures, and defined objectives or agreements, while demonstrating the ability to exercise discretion and make independent adjustments when necessary.
- Effectively handles complex, ambiguous, and incomplete information.
- May lead a small team or provide guidance, coaching, and support to colleagues.
- Demonstrates strong accountability and autonomy in resolving complex issues and assignments, including the ability to investigate, analyze, define, and implement solutions to challenging problems.
- Collaborates across teams and maintains some level of engagement with business leadership.
- Works independently with minimal supervision, guided by broad managerial direction.
What We're Looking For
- Mandatory: Bachelor’s in Information Technology or related degree.
- At least 9 years of experience with a strong GRC mindset, balancing risk, value, and cost, including awareness of AI-related risks.
- Knowledge of standards/regulations (e.g., NIST, GDPR).
- Expertise in application security (OWASP, MITRE) and AI risks (bias, drift, adversarial threats).
- Experience with secure pipelines & supply chain controls (policy-as-code, tools like Apiiro, Dependabot).
- Threat modeling across cloud, containers, and AI/data workloads.
- Programming skills (Python/Shell) to automate controls and security.
- Strong collaboration in Agile environments with business-focused communication.
Nice to Have
- Experience in IT/OT security governance.
- Familiar with developer platforms (Backstage, Cortex) to scale adoption.
- Certifications in cloud, DevOps, security, and AI governance.
Compensation & Benefits
- We offer a competitive starting salary with annual performance-related increases.
- Flexible working hours with remote/mobile working options where applicable.
- Paid parental leave, including for non-birthing parents.
- A diverse and inclusive environment with opportunities for training and development across national and international teams.
- Access to a wide range of training and development programmes.
- Join Shell’s journey toward the energy transition and net-zero ambitions.