Technical Security Governance Lead - Exposure Management - WPP

WPP is the trusted growth partner for the world’s leading brands.

We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com.

Why we're hiring:

We are looking for a Technical Security Governance Lead – Exposure Management to help build, mature, and govern a modern exposure management capability across our global environment.

This role focuses on understanding how attackers see us—across external, internal, and AI-enabled environments—and ensuring the organization continuously validates, prioritizes, and reduces real-world attack opportunities.

This is a highly strategic, lead-level role for someone who understands modern attack paths and wants to shape how security is measured and improved. You will move beyond theoretical risk into practical attacker realism—governing the adversarial testing programs, attack surface visibility, exploitability validation, and attack path analysis that keep WPP secure.

What you'll be doing:

Technical Security & Exposure Governance

• Define and shape the governance framework, guardrails, and minimum standards for continuous exposure management across WPP.
• Drive continuous improvement in attack surface visibility, control effectiveness, and risk-driven exposure governance.
• Establish escalation thresholds for validated exploitable paths and constructively challenge delayed remediations.

Adversarial Assurance Governance

• Oversee and govern continuous adversarial testing and offensive validation programs across infrastructure, applications, APIs, cloud, and identity.
• Partner with and govern specialist external providers to validate real-world exploitability and attack paths.
• Help internal teams understand where technical weaknesses translate into realistic attack opportunities.

AI Adversarial Testing Governance

• Shape and govern the adversarial testing approaches for AI and agentic systems, a rapidly growing and critical domain for WPP.
• Support and oversee testing for modern AI risks, including prompt injection resilience, tool misuse, data leakage scenarios, and agent permission boundaries.