WPP

2 weeks ago

ISMS and Risk Officer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 11 hours agoStatus: Live

Job Summary

Own and continuously improve the DTS Information Security Management System (ISMS), ensuring security policies, controls, risks, exceptions, and governance processes are maintained with clear evidence and reporting. Operate the DTS Risk Review Board, manage the central risk register, and oversee policy and control governance aligned to ISO 27001, SOC 2, GDPR, and HIPAA (where applicable). Collaborate across security, engineering, legal, and delivery teams to embed security governance into day-to-day operations.

Location: London

Workplace: Hybrid

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Key Responsibilities

•Manage the day-to-day operation and continuous improvement of the DTS ISMS.
•Maintain ISMS frameworks, documentation, control library, policies, standards, and procedures; keep artifacts version-controlled and evidenced.
•Establish and run the DTS Risk Review Board, including risk packs, dashboards, decision logs, action trackers, and escalations.
•Own and maintain the central DTS security and compliance risk register, including risk categorization, scoring, mitigations, residual risk, and reporting.
•Support compliance and audit readiness by coordinating control assurance evidence and preparing for internal/external audits, client reviews, and security questionnaires.

Key Requirements

•Proven experience in information security governance, risk management, compliance, audit, or ISMS operation.
•Strong working knowledge of ISO 27001 and practical ISMS management.
•Familiarity with SOC 2, GDPR, HIPAA, cloud security, SaaS platforms, and enterprise security controls.
•Experience maintaining risk registers, policy frameworks, control libraries, and audit evidence repositories.
•Experience running or supporting risk committees, governance forums, or control review boards.

Skills:Organizational skillsAttention to detailCollaborationTechnical writingProactive follow-through

Languages:English

Tech Stack:ISO 27001SOC 2GDPRHIPAASaaSCloud security

Company Brief

WPP

Global marketing and communications services group offering advertising, media investment management, branding, public relations, and digital services to multinational clients across industries.

Industry: Advertising Media Groups

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: London, United Kingdom

Founded: 1971

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

WPP