WPP

1 week ago

Identity, AI and Data Access Governance Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Define and run governance for who can access DTS systems, data, APIs, tools, workflows, and AI-enabled capabilities. Own identity and access governance standards, coordinate recurring access reviews and recertification, and ensure least-privilege across privileged roles, external users, service accounts, and machine identities. Extend controls to AI agent and agentic workflows, data access governance, auditable evidence, and reporting for SOC 2 and ISO 27001 requirements while partnering across security, architecture, product, engineering, legal, privacy, and risk.

Location: United Kingdom

Workplace: Hybrid

Employment Type: Full time

Job Function: Data Science & Machine Learning

Key Responsibilities

•Define and maintain the access governance framework for DTS, including standards for requesting, approving, provisioning, reviewing, revoking, and evidencing access for humans, non-humans, and AI agents.
•Own and coordinate recurring access reviews and recertification across DTS systems, privileged roles, sensitive datasets, client-facing platforms, and administrative tools.
•Govern privileged access across production systems, cloud environments, security tools, databases, CI/CD tooling, and administrative consoles while supporting least-privilege and just-in-time access models.
•Govern access for external users, clients, agencies, partners, and vendors, including onboarding, approval, permissions, expiry, offboarding, and tenant/workspace isolation considerations.
•Govern AI agent identities, permissioning, monitoring, review, revocation, and data access controls; maintain auditability, evidence, and reporting for access governance.
•produce access governance evidence for SOC 2, ISO 27001, client assurance, internal audit, and risk reviews

Key Requirements

•Experience in identity governance, access management/IAM, security governance, GRC, data access control, or platform security.
•Strong knowledge of least privilege, role-based access control, attribute-based access control, access reviews, privileged access, and segregation of duties.
•Experience governing access across SaaS platforms, cloud environments, APIs, data platforms, or enterprise technology estates.
•Knowledge of identity platforms such as Okta, Auth0, Keycloak, Azure AD/Entra ID, or similar.
•Understanding of service accounts and machine identities, plus API keys, tokens, secrets, and non-human access governance.

Experience:Identity governanceIAMData governanceGRCPlatform securitySaaSCloudAPIsAI agents

Skills:Organizational skillsCross-team collaborationRisk translationPragmatism

Languages:English

Tech Stack:OktaAuth0KeycloakAzure ADEntra IDSOC 2ISO 27001CI/CDAPIsTokensAPI keysSecrets

Company Brief

WPP

Global marketing and communications services group offering advertising, media investment management, branding, public relations, and digital services to multinational clients across industries.

Industry: Advertising Media Groups

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: London, United Kingdom

Founded: 1971

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

WPP