WPP Jobs Near Me – IT Security Lead In Hounslow

Overview

Position Title: IT Security Lead

Company: WPP

Location: Hounslow, UK

Job Description

As we continue on this journey, we require an IT Security Lead who will play a critical role in developing and implementing a world class IT security programme to protect operating companies and agencies in the S&H archetype from cyber threats. Working closely with the WPP CSO organisation, WPP IT Security, and the OA department head you will assist in setting the vision and strategy for the OA function and be responsible for escalations relating to IT security operations, security assessments, incident response, and security advisory in all aspect information technology (i.e., hardware, software, compute, storage, network, DB, virtualisation, on-prem & cloud technologies, project work, new business partnerships and M&A). As a subject-matter-expert you will be responsible for managing and developing a highly effective security function that strengthens our defences and creates a proactive and collaborative approach to IT Security and IT Security risk management.

Responsibilities:

• Work closely with and assist OA department head in developing a risk and compliance strategy for the S&H archetype that is aligned to WPP CSO and WPP IT strategies
• Establish security, risk & compliance community across the range of S&H agencies to drive the implementation and standardisation of agreed security governance, risk & compliance approach
• Drive the Archetype’s DR strategy and approach, working with S&H Archetype’s Operations Assurance Lead, Strategy & Architecture and other IT stakeholders
• Drive Business Continuity (BC) planning to the appropriate level across the Specialist and Hogarth Archetype and ensure BC plans are updated and reviewed annually
• Conduct and support IT Risk Assessments – e.g., quarterly risk landscaping – owning and driving Specialist and Hogarth Archetype-specific risk mitigation actions
• Conduct risk reviews of major contracts/clients within the S&H Archetype, for consolidation at WPP level by IT Ops
• Respond to tracking and reporting from Internal, External or Client Audit findings within the S&H Archetype
• Conduct S&H Archetype self-certification and self-monitoring for IT controls, and maintain an active liaising channel with the IT Ops function at WPP group level

Requirements:

• Certifications in security (i.e. CISA, CRISC, CISSP, CISM) desirable but not essential
• Degree or equivalent (i.e. BSc, BEng, MSc) desirable but not essential
• Comprehensive knowledge about Information Security risk standards, frameworks and best practices (i.e., ISO27K1, NIST, CIS, SOC:1-2 Cyber Essentials, GDPR)
• Strong and deep background in cyber / information security in complex global organisations
• Track record of building / leading diverse, high performing, operations teams from the ground up and comfortable working with autonomy
• Ability to provide leadership on complex and unfamiliar situations, often involving risk and emotion
• Expert communicator with a track record of operating, partnering with and influencing up to and including exec-level stakeholders
• Able to lead highly complex programmes across multiple units and geographies with high-pressure deliverable
• Risk and Compliance subject-matter-expert with in-depth knowledge of security governance in the cloud and on-prem IT technologies
• Good knowledge of qualitative, quantitative information security risk methodologies, and/or experience working with ISO31000 enterprise risk management standard
• Good understanding of managing internal and external audits (i.e., SOC:1-2, SOX) and assurance activities, including testing the design and operational effectiveness of security controls