WPP

3 days ago

Technical Security Governance Lead - Cloud, Vulnerability Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 15 hours agoStatus: Live

Job Summary

Lead security governance across cloud and vulnerability management domains, defining guardrails, baselines, and remediation expectations across global cloud platforms, workloads, identities, and infrastructure. Provide independent oversight and challenge to engineering, infrastructure, and product teams to ensure technical risks are identified, prioritized, and remediated at scale. Partner with product security and risk teams to align technical evidence with audits (ISO/SOC) and improve cloud security maturity.

Location: São Paulo

Workplace: Hybrid

Employment Type: Full time

Job Function: Administration & Executive Assistance

Key Responsibilities

•Define and maintain technical governance guardrails, baselines, and posture expectations across cloud and vulnerability domains.
•Translate enterprise policy and risk appetite into actionable technical standards for engineering and product teams.
•Govern multi-cloud posture, including identity, logging, encryption, secrets management, and network segmentation; address control gaps across tenants and workloads.
•Own and govern the vulnerability lifecycle across infrastructure, endpoints, cloud workloads, containers, applications, and APIs, including risk-based prioritization and remediation SLAs.
•Partner with Platform Engineering, Infrastructure, Product Security, and Risk teams to maintain aligned risk visibility and improve how security trends are measured and communicated to leadership.

Key Requirements

•5+ years of experience in cloud security, vulnerability management, or technical security governance.
•Hands-on or governance knowledge of major cloud platforms (AWS, GCP, and Microsoft Azure).
•Deep understanding of CNAPP and CSPM, vulnerability lifecycle management, and risk-based prioritization.
•Knowledge of cloud identity/access models and modern attack paths.
•Bachelor’s degree in Information Security, Computer Science, or a related field (or equivalent experience), with CISSP/CISM/CCSP/CISA highly desirable.

Experience:5+ years

Education:Bachelor's in Information Security, Computer Science, or a related field

Skills:CommunicationStakeholder engagementStrategic thinkingOwnershipAdaptability

Certifications:CISSPCISMCCSPCISA

Languages:English

Tech Stack:AWSGCPMicrosoft AzureCNAPPCSPMCVSSEPSSISOSOC

Company Brief

WPP

Global marketing and communications services group offering advertising, media investment management, branding, public relations, and digital services to multinational clients across industries.

Industry: Advertising Media Groups

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: London, United Kingdom

Founded: 1971

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

WPP