Chief Cyber Incident Response & Automation

WPP Media Limited; Greater London; Hybrid; GBP 110,000 - 150,000; Full time

Job summary

WPP in London is seeking a Head of Security Incident Management to lead and mature its global incident response capability across the organisation. You will define strategy, oversee incident response teams, and drive automation within the Autonomic Security Operations program, ensuring governance, regulatory alignment, and executive reporting.

You’ll collaborate with Security Architecture, Threat Intelligence, and Legal teams, and report to the Director of Operational Security while advancing a

Qualifications

• Extensive experience leading enterprise-scale Security Incident Management.
• Directing major cyber security incidents and crisis response activities.
• Strong understanding of incident response governance frameworks.
• Experience leading multidisciplinary cyber security teams in global organisations.
• Proven experience building and maturing operational security capabilities.

Responsibilities

• Own the end-to-end Security Incident Management capability across WPP.
• Lead and develop Security Incident Management Leads, Senior Responders, and Responders.
• Establish strategic direction for incident response aligned to objectives and roadmap.
• Maintain accountability for management of critical and major security incidents.
• Act as senior escalation authority for Sev1 and Sev2 incidents.
• Ensure incident governance, communication and stakeholder engagement throughout lifecycle.
• Provide executive-level updates during significant cyber incidents and crises.

Skills

Incident management

Crisis response

Governance frameworks

Cross-functional leadership

Cyber security fundamentals

Tools

SIEM

SOAR

EDR/XDR

Cloud security

Digital forensics

Job description

WPP in London is seeking a Head of Security Incident Management to lead and mature its global incident response capability across the organisation. You will define strategy, oversee incident response teams, and drive automation within the Autonomic Security Operations program, ensuring governance, regulatory alignment, and executive reporting.

You’ll collaborate with Security Architecture, Threat Intelligence, and Legal teams, and report to the Director of Operational Security while advancing a