Technical Security Governance Lead - Identity

WPP
São Paulo
Workplace: HybridFull timeFunction: Administration & Executive AssistanceEducation: bachelorsSkills: ["Communication","Problem-solving","Teamwork"]

Lead one or more technical security governance domains within Digital Security & Risk Management (DSRM). Define enforceable guardrails and baselines, monitor posture, and provide independent oversight to Enterprise Technology, engineering teams, and technology owners. Focus on identity-related governance, risk, and control effectiveness, ensuring auditable and defensible processes without designing or operating platforms.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
WPP
WPP
3 months ago

Technical Security Governance Lead - Identity

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 18 hours agoStatus: Live

Job Summary

Lead one or more technical security governance domains within Digital Security & Risk Management (DSRM). Define enforceable guardrails and baselines, monitor posture, and provide independent oversight to Enterprise Technology, engineering teams, and technology owners. Focus on identity-related governance, risk, and control effectiveness, ensuring auditable and defensible processes without designing or operating platforms.
Location: São Paulo
Workplace: Hybrid
Employment Type: Full time
Job Function: Administration & Executive Assistance
Seniority: Sr. Manager level

Key Responsibilities

  • •Define identity guardrails including authentication strength, privileged access controls, and identity-based risk thresholds.
  • •Monitor identity posture signals (e.g., MFA coverage, privileged access hygiene, risky access paths) and escalate systemic weaknesses.
  • •Ensure identity governance is treated as a primary attack-vector control domain across cloud, endpoint, and product environments.
  • •Define and maintain technical governance guardrails, minimum baselines, and posture expectations for assigned domains.
  • •Translate enterprise policies, standards, and risk appetite into clear and actionable technical expectations for execution teams.

Pay and Benefits

Schedule:4-Day Week

Key Requirements

  • •Fluent English – reading, writing and conversation skills.
  • •Demonstrable experience in technical security governance, security assurance, or risk-based security oversight in a global environment.
  • •Strong understanding of cybersecurity policies, standards, and frameworks (e.g., ISO 27001, NIST CSF).
  • •Strong understanding of cloud security, vulnerability management, identity risk, and modern attack paths and exposure management.
  • •Experience working with global engineering and operations teams.
Experience:CybersecuritySecurity governanceRisk management
Education:Bachelor's
Skills:CommunicationProblem-solvingTeamwork
Certifications:CISSPAzureAWSGCP
Languages:English
Tech Stack:CNAPPCSPMEDRISO 27001NIST CSFCloud security

Company Brief

WPP
Global marketing and communications services group offering advertising, media investment management, branding, public relations, and digital services to multinational clients across industries.
Industry: Advertising Media Groups
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1971
WebsiteLinkedIn