Senior ISMS & Security Governance Lead

WPP; United Kingdom; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

WPP in London is seeking a Senior Technology Risk Analyst to manage and continuously improve the Information Security Management System for Data & Technology Solutions. You will ensure security policies, controls, risks and governance are maintained, evidenced, reviewed and acted upon, reporting to the SVP Security and Compliance.

This is a hands-on GRC role, collaborating with security, product, engineering, legal, risk, and delivery teams to transform governance into a dynamic, working system

Qualifications

• Proven experience in information security governance, risk management, compliance, audit, or ISMS operation.
• Strong working knowledge of ISO 27001 and practical ISMS management.
• Familiarity with SOC 2, GDPR, HIPAA, cloud security and enterprise security controls.

Responsibilities

• Operate the DTS ISMS and drive continuous improvement.
• Own policy management, control documentation, and policy reviews with stakeholders.
• Maintain and communicate risk treatments, decisions, and evidence across DTS.

Skills

Security governance

Risk management

Compliance

Audit

ISO 27001

Policy writing

Job description

WPP in London is seeking a Senior Technology Risk Analyst to manage and continuously improve the Information Security Management System for Data & Technology Solutions. You will ensure security policies, controls, risks and governance are maintained, evidenced, reviewed and acted upon, reporting to the SVP Security and Compliance.

This is a hands-on GRC role, collaborating with security, product, engineering, legal, risk, and delivery teams to transform governance into a dynamic, working system