Technical Security Governance Lead - Cloud, Vulnerability Management

WPP
São Paulo
Workplace: HybridFull timeFunction: Administration & Executive AssistanceExperience: 5+ yearsEducation: bachelorsSkills: ["Communication","Stakeholder engagement","Strategic thinking","Ownership","Adaptability"]

Lead security governance across cloud and vulnerability management domains, defining guardrails, baselines, and remediation expectations across global cloud platforms, workloads, identities, and infrastructure. Provide independent oversight and challenge to engineering, infrastructure, and product teams to ensure technical risks are identified, prioritized, and remediated at scale. Partner with product security and risk teams to align technical evidence with audits (ISO/SOC) and improve cloud security maturity.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
WPP
WPP
1 month ago

Technical Security Governance Lead - Cloud, Vulnerability Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 8 hours agoStatus: Live

Job Summary

Lead security governance across cloud and vulnerability management domains, defining guardrails, baselines, and remediation expectations across global cloud platforms, workloads, identities, and infrastructure. Provide independent oversight and challenge to engineering, infrastructure, and product teams to ensure technical risks are identified, prioritized, and remediated at scale. Partner with product security and risk teams to align technical evidence with audits (ISO/SOC) and improve cloud security maturity.
Location: São Paulo
Workplace: Hybrid
Employment Type: Full time
Job Function: Administration & Executive Assistance

Key Responsibilities

  • •Define and maintain technical governance guardrails, baselines, and posture expectations across cloud and vulnerability domains.
  • •Translate enterprise policy and risk appetite into actionable technical standards for engineering and product teams.
  • •Govern multi-cloud posture, including identity, logging, encryption, secrets management, and network segmentation; address control gaps across tenants and workloads.
  • •Own and govern the vulnerability lifecycle across infrastructure, endpoints, cloud workloads, containers, applications, and APIs, including risk-based prioritization and remediation SLAs.
  • •Partner with Platform Engineering, Infrastructure, Product Security, and Risk teams to maintain aligned risk visibility and improve how security trends are measured and communicated to leadership.

Key Requirements

  • •5+ years of experience in cloud security, vulnerability management, or technical security governance.
  • •Hands-on or governance knowledge of major cloud platforms (AWS, GCP, and Microsoft Azure).
  • •Deep understanding of CNAPP and CSPM, vulnerability lifecycle management, and risk-based prioritization.
  • •Knowledge of cloud identity/access models and modern attack paths.
  • •Bachelor’s degree in Information Security, Computer Science, or a related field (or equivalent experience), with CISSP/CISM/CCSP/CISA highly desirable.
Experience:5+ years
Education:Bachelor's in Information Security, Computer Science, or a related field
Skills:CommunicationStakeholder engagementStrategic thinkingOwnershipAdaptability
Certifications:CISSPCISMCCSPCISA
Languages:English
Tech Stack:AWSGCPMicrosoft AzureCNAPPCSPMCVSSEPSSISOSOC

Company Brief

WPP
Global marketing and communications services group offering advertising, media investment management, branding, public relations, and digital services to multinational clients across industries.
Industry: Advertising Media Groups
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1971
WebsiteLinkedIn