WPP

3 days ago

Technical Security Governance Lead - Software Development (Open)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Define and evolve secure software development standards, guardrails, and governance practices. Partner with engineering and product teams to embed security into development lifecycles and delivery processes, improving visibility and management of software security risks such as vulnerabilities and insecure coding trends. Strengthen governance across software supply chains using SBOM practices, support secure CI/CD via controls like code scanning and secrets detection, and drive continuous security maturity improvements across the organization.

Location: London

Workplace: Hybrid

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Mid level

Key Responsibilities

•Define and evolve secure software development standards, guardrails, and governance practices.
•Partner with engineering and product teams to embed security into development lifecycles and delivery processes.
•Improve visibility and management of software security risks, including vulnerabilities and insecure coding trends.
•Strengthen governance of software supply chains, open-source dependencies, and Software Bill of Materials (SBOM) practices.
•Support development of secure CI/CD pipelines through controls such as code scanning, secrets detection, and release governance.

Pay and Benefits

Schedule:4-Day Week

Key Requirements

•Experience in application security, software security, DevSecOps, software assurance, or technical security governance.
•Strong understanding of Secure SDLC, application security, and modern software development practices.
•Knowledge of CI/CD security, cloud-native environments, and software supply chain risk.
•Experience working closely with engineering teams to improve security outcomes.
•Strong stakeholder management and communication skills, with the ability to influence technical and non-technical audiences.

Skills:Stakeholder managementCommunicationInfluencingPragmatic approachCollaboration

Certifications:CISSPCSSLP

Languages:English

Tech Stack:CI/CDCloud-nativeSoftware supply chainSBOMCode scanningSecrets detectionSASTDASTSCAAWSAzureGoogle CloudPrompt injectionAgent controlsData protection

Company Brief

WPP

Global marketing and communications services group offering advertising, media investment management, branding, public relations, and digital services to multinational clients across industries.

Industry: Advertising Media Groups

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: London, United Kingdom

Founded: 1971

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

WPP