IT Security Lead - WPP London, England, United Kingdom Bookmark Share Print 594 0 3

Listing Description

WPP IT provides IT services for WPP, the world’s largest communications services group. As a creative transformation company, WPP is helping its clients transform the future through extraordinary work. WPP IT is an integral part of that journey and we are proud to provide technology for some of the world’s most creative brands.


#LI-Hybrid




Visit our LinkedIn page to see what we're up to!


Why we're hiring:


At WPP, technology is at the heart of everything we do, and it is WPP IT’s mission to enable everyone to collaborate, create and thrive. WPP IT is transforming to create our future IT together that will support the world’s largest creative transformation company. 


As we continue on this journey, we require an IT Security Lead who will play a critical role in developing and implementing a world class IT security programme to protect operating companies and agencies in the S&H archetype from cyber threats. Working closely with the WPP CSO organisation, WPP IT Security, and the OA department head you will assist in setting the vision and strategy for the OA function and be responsible for escalations relating to IT security operations, security assessments, incident response, and security advisory in all aspect information technology (i.e., hardware, software, compute, storage, network, DB, virtualisation, on-prem & cloud technologies, project work, new business partnerships and M&A). As a subject-matter-expert you will be responsible for managing and developing a highly effective security function that strengthens our defences and creates a proactive and collaborative approach to IT Security and IT Security risk management.  


You will operate in a highly complex environment with multiple risk categories, including IT operations, information security, legal, regulatory, financial and commercial with broad impacts spanning both the S&H Archetype and the WPP Group.  


You’ll have a deep understanding of the information security standards, frameworks, and methodologies we can use to strengthen our security posture. You will work across all OpCo’s and agencies part of the S&H archetype to implement agreed processes and practices mandated by WPP CSO organisation and WPP IT Security function.


 


What you'll be doing:



  • Work closely with and assist OA department head in developing a risk and compliance strategy for the S&H archetype that is aligned to WPP CSO and WPP IT strategies 

  • Establish security, risk & compliance community across the range of S&H agencies to drive the implementation and standardisation of agreed security governance, risk & compliance approach  

  • Drive the Archetype’s DR strategy and approach, working with S&H Archetype’s Operations Assurance Lead, Strategy & Architecture and other IT stakeholders  

  • Drive Business Continuity (BC) planning to the appropriate level across the Specialist and Hogarth Archetype and ensure BC plans are updated and reviewed annually  

  • Conduct and support IT Risk Assessments – e.g., quarterly risk landscaping - owning and driving Specialist and Hogarth Archetype-specific risk mitigation actions  

  • Conduct risk reviews of major contracts/clients within the S&H Archetype, for consolidation at WPP level by IT Ops  

  • Respond to tracking and reporting from Internal, External or Client Audit findings within the S&H Archetype  

  • Conduct S&H Archetype self-certification and self-monitoring for IT controls, and maintain an active liaising channel with the IT Ops function at WPP group level  

  • Support S&H Archetype-wide input into the WPP IT Asset Register and CMDB owned by IT Ops  

  • Be S&H point of contact for relevant business stakeholder escalations relating to IT risk and compliance. Lead and oversee resolution of the most complex, critical, and impactful risk & compliance issues and security events in relation to IT Security  

  • Work closely with the IT Ops and CSO security teams to deal with security and compliance issues  

  • Work across the S&H Archetype teams like IT Security, Global Technology Services, Digital Workplace and Strategy and Architecture to design controls, deliver management information (KRIs) and risk mitigation plans  

  • Drive engagement, comms and adoption for all risk, compliance and security tasks to ensure the rationale for task is understood, the mandate is embedded, and colleagues and partners are trained and can perform effectively and efficiently 

  • Design and deliver a range of educational activities and material to embed a strong SecureIT culture, mindset and behaviours across the archetype 

  • Build strong relationships with the external stakeholders (customer, suppliers, other major bodies) as well as build a network of peers to bring innovation and insights on industry best practice, standards, frameworks, and processes to deliver a future-fit capability  

  • Ensure that S&H remains compliant with national legislative, regulatory, contractual and WPP security governance obligations 

  • Support OpCo’s and Agencies in the S&H Archetype during client pitch for winning new work by providing a compelling narrative to our prospective clients around the strength of our risk, compliance and security proposition  

  • Be responsible more managing a team of risk and compliance analysts to support business functions in EMEA, AMER & APAC regions  


 


What you'll need:



  • Certifications in security (i.e. CISA, CRISC, CISSP, CISM) desirable but not essential  

  • Degree or equivalent (i.e. BSc, BEng, MSc) desirable but not essential  

  • Comprehensive knowledge about Information Security risk standards, frameworks and best practices (i.e., ISO27K1, NIST, CIS, SOC:1-2 Cyber Essentials, GDPR)  

  • Strong and deep background in cyber / information security in complex global organisations 

  • Track record of building / leading diverse, high performing, operations teams from the ground up and comfortable working with autonomy  

  • Ability to provide leadership on complex and unfamiliar situations, often involving risk and emotion  

  • Expert communicator with a track record of operating, partnering with and influencing up to and including exec-level stakeholders  

  • Able to lead highly complex programmes across multiple units and geographies with high-pressure deliverable  

  • Risk and Compliance subject-matter-expert with in-depth knowledge of security governance in the cloud and on-prem IT technologies  

  • Good knowledge of qualitative, quantitative information security risk methodologies, and/or experience working with ISO31000 enterprise risk management standard  

  • Good understanding of managing internal and external audits (i.e., SOC:1-2, SOX) and assurance activities, including testing the design and operational effectiveness of security controls  

  • Ability to operate and lead in a fast-paced organizational transformation and able to navigate and champion change across organisational / geographical complexity  

  • A genuine desire to lead, develop, coach and mentor direct reports/team members  


 


Who you are:


You’re open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.


You’re optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with confidence: to try the new and to seek the unexpected.


You’re extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we deliver extraordinary every day.


 


What we'll give you:


Passionate, driven people – We champion a culture of people that do extraordinary work.


Scale and opportunity – We offer the opportunity to create, influence and deliver projects at a scale that is unparalleled in the industry.


Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?


Listing Details

  • Citizenship: Not Provided
  • Incentives: Not Provided

 

  • Education: Not Provided
  • Travel: Not Provided
  • Telework: Not Provided



About Us

NinjaJobs is a community-run job platform developed by information security professionals. Our unique approach of focusing strictly on cybersecurity positions allows us to personalize the user experience.

Our Contacts

1765 Greensboro Station Pl.
Suite 900
Tysons Corner Va 22102

(703) 594-7765