WPP

3 days ago

Technical Security Governance Lead - Exposure Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 15 hours agoStatus: Live

Job Summary

Build, mature, and govern WPP’s exposure management capability across the global environment. Define governance frameworks and guardrails to continuously validate, prioritize, and reduce real-world attack opportunities. Oversee adversarial testing across infrastructure, applications, APIs, cloud, and identity, and shape AI/agentic adversarial testing (e.g., prompt injection, tool misuse, data leakage). Maintain strategic visibility into external assets and map complex attack paths across identity and cloud trust boundaries.

Location: São Paulo

Workplace: Hybrid

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Mid level

Key Responsibilities

•Define and shape governance frameworks, guardrails, and minimum standards for continuous exposure management across WPP.
•Drive continuous improvement in attack surface visibility, control effectiveness, and risk-driven exposure governance.
•Oversee and govern continuous adversarial testing and offensive validation across infrastructure, applications, APIs, cloud, and identity.
•Shape adversarial testing approaches for AI and agentic systems, including prompt injection resilience, tool misuse, data leakage, and agent permission boundaries.
•Maintain strategic visibility of external-facing assets and map/analyze complex attack paths across identity boundaries, privilege escalation, lateral movement, and cloud trust relationships.

Key Requirements

•5+ years of experience in offensive security, exposure management, red teaming, or attack surface management.
•Strong technical understanding of attacker tradecraft and adversarial testing methodologies (e.g., EASM, BAS, Attack Path Analysis).
•Proven experience analyzing attack paths within cloud- and identity-based environments.
•Interest or experience in AI security and emerging AI attack models.
•Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent); OSCP, CREST, or CISSP highly regarded.

Experience:5+ years

Education:Bachelor's

Skills:Strategic thinkingCollaborationRelationship buildingOwnershipProactive mindset

Certifications:OSCPCRESTCISSP

Languages:English

Tech Stack:Offensive securityExposure managementRed teamingAttack surface managementEASMBASAttack Path AnalysisCloudIdentityAI securityAgentic systemsPrompt injection resilienceTool misuseData leakage scenariosAgent permission boundariesAttack surface visibilityInternet exposure driftShadow ITPrivilege escalationLateral movement

Company Brief

WPP

Global marketing and communications services group offering advertising, media investment management, branding, public relations, and digital services to multinational clients across industries.

Industry: Advertising Media Groups

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: London, United Kingdom

Founded: 1971

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

WPP