Risk Specialist

WPP
São Paulo
Workplace: HybridFull timeFunction: Legal, Risk & ComplianceEducation: bachelorsSkills: ["Communication","Collaboration","Analytical thinking","Problem-solving","Detail-oriented"]

Own the identification, assessment, documentation and monitoring of digital and information security risks across the organization. You will conduct enterprise and operational risk assessments, document defensible risk statements, maintain risk records in GRC tooling, and monitor KRIs, partnering with governance, assurance and technical teams to implement mitigations in a hybrid, multinational environment.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
WPP
WPP
3 months ago

Risk Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 18 hours agoStatus: Live

Job Summary

Own the identification, assessment, documentation and monitoring of digital and information security risks across the organization. You will conduct enterprise and operational risk assessments, document defensible risk statements, maintain risk records in GRC tooling, and monitor KRIs, partnering with governance, assurance and technical teams to implement mitigations in a hybrid, multinational environment.
Location: São Paulo
Workplace: Hybrid
Employment Type: Full time
Job Function: Legal, Risk & Compliance

Key Responsibilities

  • •Conduct enterprise and operational security risk assessments.
  • •Maintain accurate and current risk records within approved GRC tooling.
  • •Assess organisational-level, third-party or product risk and identify vulnerabilities with mitigation strategies.
  • •Monitor and report on Key Risk Indicators (KRIs) to inform cybersecurity posture.
  • •Escalate material risk changes or overdue actions and track remediation progress.

Pay and Benefits

Perks:HybridHealth InsurancePensionLearning BudgetRemote WorkWellness Stipend

Key Requirements

  • •Fluent English (reading, writing, and conversation).
  • •Bachelor’s degree in Information Security, Risk Management, or equivalent
  • •Experience in cybersecurity governance, GRC, or risk support roles.
  • •Strong understanding of cybersecurity policies, standards, and frameworks (e.g. ISO 27001, NIST CSF).
  • •Ability to work with governance, assurance, and technical teams to maintain clear and usable frameworks.
Experience:CybersecurityRisk managementGRC
Education:Bachelor's
Skills:CommunicationCollaborationAnalytical thinkingProblem-solvingDetail-oriented
Certifications:CISSPCISMCRISC
Languages:English
Tech Stack:ISO 27001NIST CSFGRC toolingCloud computingIaaSPaaSSaaSDevSecOps

Company Brief

WPP
Global marketing and communications services group offering advertising, media investment management, branding, public relations, and digital services to multinational clients across industries.
Industry: Advertising Media Groups
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1971
WebsiteLinkedIn