Risk Specialist
Core
Own the identification, assessment, documentation and monitoring of digital and information security risks across WPP, ensuring risks are clearly articulated, consistently assessed and effectively tracked.
Role type
Cybersecurity Governance, Risk, and Compliance (GRC) Specialist
Builds
WPP's Digital Security risk management framework and enterprise security posture
Domain
Cybersecurity, Information Security, Enterprise Risk Management
Required skills
Cybersecurity governance, GRC frameworks (ISO 27001, NIST CSF), risk assessment, risk documentation, KRI monitoring, cloud security (IaaS/PaaS/SaaS), DevSecOps principles, third-party risk management, mitigation strategy development
Preferred skills
CISSP, CISM, or CRISC certifications, GRC tools proficiency, agile methodologies, multinational matrixed company experience
Technologies
GRC tooling, risk management platforms
Responsibilities
Conduct enterprise and operational security risk assessments; Maintain accurate and current risk records within approved GRC tooling; Monitor and report on Key Risk Indicators (KRIs); Support risk owners in defining proportionate mitigation actions; Track remediation progress and reassess residual risk; Escalate material risk changes or overdue actions
Seniority
Mid-level, hands-on IC
