Application & Development Security Lead

WPP
London
Workplace: HybridFull timeFunction: Administration & Executive AssistanceSkills: ["Stakeholder management","Communication","Influencing","Pragmatic approach","Collaboration"]

Define and evolve secure software development standards, guardrails, and governance practices. Partner with engineering and product teams to embed security into development lifecycles and delivery processes, improving visibility and management of software security risks such as vulnerabilities and insecure coding trends. Strengthen governance across software supply chains using SBOM practices, support secure CI/CD via controls like code scanning and secrets detection, and drive continuous security maturity improvements across the organization.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
WPP
WPP
1 month ago

Application & Development Security Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 18 hours agoStatus: Live

Job Summary

Define and evolve secure software development standards, guardrails, and governance practices. Partner with engineering and product teams to embed security into development lifecycles and delivery processes, improving visibility and management of software security risks such as vulnerabilities and insecure coding trends. Strengthen governance across software supply chains using SBOM practices, support secure CI/CD via controls like code scanning and secrets detection, and drive continuous security maturity improvements across the organization.
Location: London
Workplace: Hybrid
Employment Type: Full time
Job Function: Administration & Executive Assistance
Seniority: Mid level

Key Responsibilities

  • •Define and evolve secure software development standards, guardrails, and governance practices.
  • •Partner with engineering and product teams to embed security into development lifecycles and delivery processes.
  • •Improve visibility and management of software security risks, including vulnerabilities and insecure coding trends.
  • •Strengthen governance of software supply chains, open-source dependencies, and Software Bill of Materials (SBOM) practices.
  • •Support development of secure CI/CD pipelines through controls such as code scanning, secrets detection, and release governance.

Pay and Benefits

Schedule:4-Day Week

Key Requirements

  • •Experience in application security, software security, DevSecOps, software assurance, or technical security governance.
  • •Strong understanding of Secure SDLC, application security, and modern software development practices.
  • •Knowledge of CI/CD security, cloud-native environments, and software supply chain risk.
  • •Experience working closely with engineering teams to improve security outcomes.
  • •Strong stakeholder management and communication skills, with the ability to influence technical and non-technical audiences.
Skills:Stakeholder managementCommunicationInfluencingPragmatic approachCollaboration
Certifications:CISSPCSSLP
Languages:English
Tech Stack:CI/CDCloud-nativeSoftware supply chainSBOMCode scanningSecrets detectionSASTDASTSCAAWSAzureGoogle CloudPrompt injectionAgent controlsData protection

Company Brief

WPP
Global marketing and communications services group offering advertising, media investment management, branding, public relations, and digital services to multinational clients across industries.
Industry: Advertising Media Groups
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1971
WebsiteLinkedIn