Senior Tech Risk & GRC Analyst (Hybrid London)

Academic Key; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

WPP in London is seeking a Senior Technology Risk Analyst to lead the Information Security Management System (ISMS) across Data & Technology Solutions. You will own governance of policies, controls, risks, and risk treatment, and work with product, engineering, infrastructure, legal, and risk teams to keep security programs dynamic and compliant.

You will run the Risk Review Board, maintain the central risk register, collect evidence for ISO 27001, SOC 2 and GDPR, and support audit readiness

Qualifications

• Experience owning and operating an Information Security Management System (ISMS).
• Ability to manage security policies, controls, risks, exceptions and governance processes.
• Proven experience leading Governance, Risk and Compliance (GRC) programs and cross-functional collaboration.

Responsibilities

• ISMS Ownership & Operation: manage day-to-day ISMS activities and maintain documentation.
• Policy Management: own lifecycle of security policies and standards across DTS.
• Risk Review Board: establish cadence, prepare risk packs and track actions.
• Risk Register: maintain central risk register with risk scores and mitigations.
• Control Evidence: ensure evidence collection for ISO 27001, SOC 2, GDPR, etc.
• Audit Readiness: support compliance obligations and internal/external audits.

Skills

ISMS management

Risk management

Policy management

GRC

ISO 27001

SOC 2

GDPR

HIPAA

Job description

WPP in London is seeking a Senior Technology Risk Analyst to lead the Information Security Management System (ISMS) across Data & Technology Solutions. You will own governance of policies, controls, risks, and risk treatment, and work with product, engineering, infrastructure, legal, and risk teams to keep security programs dynamic and compliant.

You will run the Risk Review Board, maintain the central risk register, collect evidence for ISO 27001, SOC 2 and GDPR, and support audit readiness