Technical Security Governance Lead - Exposure Management

WPP
São Paulo
Workplace: HybridFull timeFunction: Administration & Executive AssistanceExperience: 5+ yearsEducation: bachelorsSkills: ["Strategic thinking","Collaboration","Relationship building","Ownership","Proactive mindset"]

Build, mature, and govern WPP’s exposure management capability across the global environment. Define governance frameworks and guardrails to continuously validate, prioritize, and reduce real-world attack opportunities. Oversee adversarial testing across infrastructure, applications, APIs, cloud, and identity, and shape AI/agentic adversarial testing (e.g., prompt injection, tool misuse, data leakage). Maintain strategic visibility into external assets and map complex attack paths across identity and cloud trust boundaries.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
WPP
WPP
1 month ago

Technical Security Governance Lead - Exposure Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 13 hours agoStatus: Live

Job Summary

Build, mature, and govern WPP’s exposure management capability across the global environment. Define governance frameworks and guardrails to continuously validate, prioritize, and reduce real-world attack opportunities. Oversee adversarial testing across infrastructure, applications, APIs, cloud, and identity, and shape AI/agentic adversarial testing (e.g., prompt injection, tool misuse, data leakage). Maintain strategic visibility into external assets and map complex attack paths across identity and cloud trust boundaries.
Location: São Paulo
Workplace: Hybrid
Employment Type: Full time
Job Function: Administration & Executive Assistance
Seniority: Mid level

Key Responsibilities

  • •Define and shape governance frameworks, guardrails, and minimum standards for continuous exposure management across WPP.
  • •Drive continuous improvement in attack surface visibility, control effectiveness, and risk-driven exposure governance.
  • •Oversee and govern continuous adversarial testing and offensive validation across infrastructure, applications, APIs, cloud, and identity.
  • •Shape adversarial testing approaches for AI and agentic systems, including prompt injection resilience, tool misuse, data leakage, and agent permission boundaries.
  • •Maintain strategic visibility of external-facing assets and map/analyze complex attack paths across identity boundaries, privilege escalation, lateral movement, and cloud trust relationships.

Key Requirements

  • •5+ years of experience in offensive security, exposure management, red teaming, or attack surface management.
  • •Strong technical understanding of attacker tradecraft and adversarial testing methodologies (e.g., EASM, BAS, Attack Path Analysis).
  • •Proven experience analyzing attack paths within cloud- and identity-based environments.
  • •Interest or experience in AI security and emerging AI attack models.
  • •Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent); OSCP, CREST, or CISSP highly regarded.
Experience:5+ years
Education:Bachelor's
Skills:Strategic thinkingCollaborationRelationship buildingOwnershipProactive mindset
Certifications:OSCPCRESTCISSP
Languages:English
Tech Stack:Offensive securityExposure managementRed teamingAttack surface managementEASMBASAttack Path AnalysisCloudIdentityAI securityAgentic systemsPrompt injection resilienceTool misuseData leakage scenariosAgent permission boundariesAttack surface visibilityInternet exposure driftShadow ITPrivilege escalationLateral movement

Company Brief

WPP
Global marketing and communications services group offering advertising, media investment management, branding, public relations, and digital services to multinational clients across industries.
Industry: Advertising Media Groups
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1971
WebsiteLinkedIn