Senior Technology Risk Analyst

WPP
London
Workplace: HybridFull timeFunction: Legal, Risk & ComplianceSkills: ["Organizational skills","Attention to detail","Collaboration","Technical writing","Proactive follow-through"]

Own and continuously improve the DTS Information Security Management System (ISMS), ensuring security policies, controls, risks, exceptions, and governance processes are maintained with clear evidence and reporting. Operate the DTS Risk Review Board, manage the central risk register, and oversee policy and control governance aligned to ISO 27001, SOC 2, GDPR, and HIPAA (where applicable). Collaborate across security, engineering, legal, and delivery teams to embed security governance into day-to-day operations.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
WPP
WPP
1 month ago

Senior Technology Risk Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 4 hours agoStatus: Live

Job Summary

Own and continuously improve the DTS Information Security Management System (ISMS), ensuring security policies, controls, risks, exceptions, and governance processes are maintained with clear evidence and reporting. Operate the DTS Risk Review Board, manage the central risk register, and oversee policy and control governance aligned to ISO 27001, SOC 2, GDPR, and HIPAA (where applicable). Collaborate across security, engineering, legal, and delivery teams to embed security governance into day-to-day operations.
Location: London
Workplace: Hybrid
Employment Type: Full time
Job Function: Legal, Risk & Compliance

Key Responsibilities

  • •Manage the day-to-day operation and continuous improvement of the DTS ISMS.
  • •Maintain ISMS frameworks, documentation, control library, policies, standards, and procedures; keep artifacts version-controlled and evidenced.
  • •Establish and run the DTS Risk Review Board, including risk packs, dashboards, decision logs, action trackers, and escalations.
  • •Own and maintain the central DTS security and compliance risk register, including risk categorization, scoring, mitigations, residual risk, and reporting.
  • •Support compliance and audit readiness by coordinating control assurance evidence and preparing for internal/external audits, client reviews, and security questionnaires.

Key Requirements

  • •Proven experience in information security governance, risk management, compliance, audit, or ISMS operation.
  • •Strong working knowledge of ISO 27001 and practical ISMS management.
  • •Familiarity with SOC 2, GDPR, HIPAA, cloud security, SaaS platforms, and enterprise security controls.
  • •Experience maintaining risk registers, policy frameworks, control libraries, and audit evidence repositories.
  • •Experience running or supporting risk committees, governance forums, or control review boards.
Skills:Organizational skillsAttention to detailCollaborationTechnical writingProactive follow-through
Languages:English
Tech Stack:ISO 27001SOC 2GDPRHIPAASaaSCloud security

Company Brief

WPP
Global marketing and communications services group offering advertising, media investment management, branding, public relations, and digital services to multinational clients across industries.
Industry: Advertising Media Groups
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1971
WebsiteLinkedIn