IT Risk & Compliance Manager

WPP; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

WPP is seeking a Cyber Risk and Compliance professional in London to drive IT audit activities and SOX controls across the Media division. The role focuses on embedding robust data and technology controls, coordinating with Internal Risk and Control teams, and ensuring audit readiness for SOX 404 IO obligations.

The successful candidate will liaise with markets, control owners, and senior stakeholders to deliver control assurance, remediation plans, and clear reporting in a fast-paced, hybrid

Qualifications

• Prior experience in internal and external IT audits.
• Robust understanding in SOX controls framework.
• Experience working with external auditors on SOX compliance within large-scale transformation programmes.

Responsibilities

• Be a key liaison with markets to assist in timely completion of audits (internal, external or client).
• Communicate effectively with Control Owners, Operators, Business platform Directors and other senior stakeholders.
• Ensure all stakeholders are informed about progress, risks, and issues.
• Develop Standard Operating Procedures and Risk and Controls Matrix for application control environment.
• Monitor audit deficiencies and support remediation plans with markets.
• Review remediation documentation to ensure plan is implemented correctly.
• Identify mitigating controls addressing IT and financial risk frameworks.
• Perform walkthroughs of automated controls and review system configuration.
• Provide up-to-date reporting of audit readiness to the Director of CRC Media.

Skills

SOX controls

IT audits

Data migration

Stakeholder comms

Risk assessment

Education

CISA

CIA

CRISC

Job description

WPP is seeking a Cyber Risk and Compliance professional in London to drive IT audit activities and SOX controls across the Media division. The role focuses on embedding robust data and technology controls, coordinating with Internal Risk and Control teams, and ensuring audit readiness for SOX 404 IO obligations.

The successful candidate will liaise with markets, control owners, and senior stakeholders to deliver control assurance, remediation plans, and clear reporting in a fast-paced, hybrid