The posting
WPP is the trusted growth partner for the world’s leading brands.
We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.
We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.
Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.
For more information, visit WPP.com.
Why we're hiring:
As a Business Security Services Director, you will play a critical role in protecting WPP’s information assets across your designated business area. Acting as the key link between WPP Digital Security & Risk Management and the business, you will ensure global security strategies, standards and initiatives are effectively embedded at a local level. You will also work closely with WPP HQ teams across Strategy & Risk, Security Awareness and Technical Security Governance to ensure a consistent and joined-up approach to security.
This opportunity would suit an experienced Senior Manager ready to step into a broader leadership role, or an early-stage Director looking to further develop their impact and influence.
What you'll be doing:
- Security Leadership:
- Serve as the primary point of contact for all Digital Security matters within your region.
- Collaborate with business leadership, WPP Digital Security and Enterprise Technology Cyber teams to align security efforts with business goals.
- Act as the primary liaison between the business and WPP Digital Security and Cyber Security functions, ensuring that business needs and perspectives are considered in WPP Digital Security strategy development.
- Collaborate with the Enterprise Technology, Technology Compliance team to ensure that business operations comply with IT Compliance requirements.
- Advocate for business security needs and ensure they are considered in the development of WPP security policies and initiatives.
- Collaboration with WPP Digital Security & Risk Functions: In conjunction with the Digital Security Awareness team, develop and deliver tailored security awareness programs to educate business employees on best practices and WPP policies. Promote a culture of security awareness and ensure ongoing engagement at all levels of WPP and its Operating Companies in region.
- Strategy and Risk: Work closely with the Digital Security Strategy and Risk teams to ensure that business security risks are identified, assessed, and integrated into the broader WPP risk management framework. Work with the Governance team to ensure that business security practices adhere to WPP policies, standards, and regulatory requirements. Partner with the Client Assurance team to support client security requirements, respond to security inquiries, and assist in the preparation of security documentation for clients. Partner with Vendor and Supply Chain team to assess and manage the security posture of business vendors, ensuring that they meet WPP security standards.
- Security Awareness & Training:
- Product Security: Collaborate with the Digital Security Product & AI Security team to ensure that security is integrated into the development and deployment of products and services within the region, aligning with product security standards.
- Corporate Investigations: Ensure any Operating Companies investigations and data/evidence acquisitions is conducted following WPP polices and process.
- Incident Response:
- Coordinate and manage the response to security incidents within the region, working closely with the Enterprise Technology Cyber Incident Response team.
- Lead investigations for the business and ensure timely reporting and remediation of security breaches.
- Compliance & Regulatory Requirements:
- Ensure that business operations comply with applicable local and international security laws, regulations, and standards.
- Collaborate with the Technology Compliance team to ensure that business operations comply with ET Compliance requirements.
- Provide cybersecurity-specific assistance with business audits and ensure that all compliance-related activities are documented and addressed.
- Reporting & Metrics:
- Provide regular updates to the Global CISO and business leadership on the status of security initiatives, risk assessments, and incidents.
- Working closely with the Technical Security Governance team, develop and track key performance indicators (KPIs) to measure the effectiveness of the business Digital Security program.
What you'll need:
- Bachelor’s degree in Information Security, Computer Science, or a related field.
- Significant experience in information security, and experience within a leadership role.
- Strong understanding of global and regional security standards and regulations (e.g., GDPR, ISO 27001).
- Experience in a global, multi-national organisation.
- Proven track record in risk management, incident response, and security policy implementation.
- Demonstrated experience in working with global teams and functions.
- Excellent communication and interpersonal skills, with the ability to influence stakeholders at all levels.
- Relevant certifications such as CISSP, CISM, or CISA are highly desirable.
Personal Attributes:
- Strategic thinker with the ability to align security initiatives with business goals.
- Proactive, with a strong sense of ownership and accountability.
- Ability to work effectively in a fast-paced, dynamic environment.
- Culturally aware and capable of working with diverse teams across different regions.
- Strong collaborative skills to work effectively with global teams and functions.
Who you are:
You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.
You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.
You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.
What we'll give you:
Passionate, inspired people – We aim to create a culture in which people can do extraordinary work.
Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.
Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?
#LI-Hybrid
We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process.
WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers.
