Technical Security Governance Lead - Exposure Management

We are looking for a lead for Exposure Management to provide deep technical investigation of suspected security exposures across WPP's global technology estate. 

Working within TSG, this role will investigate vulnerabilities and attack opportunities across a highly diverse environment spanning cloud, infrastructure, operating systems, identity, applications, AI and emerging technologies. You will use modern security, exposure and adversarial-testing capabilities to understand whether weaknesses are genuinely exploitable, how they could combine into realistic attack paths, and which exposure deserves attention first. 

This is a hands-on technical role with enterprise-wide reach. You will investigate complex security questions, challenge assumptions with evidence, identify systemic patterns, and translate technical findings into clear priorities for the teams responsible for remediation. You will not own every fix. Your role is to establish technical reality, determine what matters, and direct attention towards the improvements that will most meaningfully reduce WPP's exposure. 

The role sits within Technical Security Governance (TSG), reporting to the Director, Security Governance & Posture within the Group CISO organisation. 

• Act as WPP’s technical Principal for Exposure Management, providing senior technical judgement on attack paths and systemic exposure across the global technology environment.
• Investigate suspected vulnerabilities across infrastructure, operating systems, identity, cloud, applications, data and AI.
• Follow the evidence beyond the tool output, combining information from multiple sources to determine what is genuinely exploitable, how weaknesses connect, and what actually matters.
• Assess attack paths and systemic exposure, maintaining enough perspective to distinguish significant enterprise risk from isolated or technically interesting findings.
• Establish technical priorities for mitigation, helping teams focus effort on the exposures most likely to materially improve WPP's security posture.
• Work with TSG specialists across Cloud, Identity, Data, Infrastructure, Application and AI to understand findings in context and develop technically credible recommendations for system owners.
• Provide broad technical security expertise on complex security questions, technologies and protective approaches, including areas such as encryption, security tooling and emerging threats.
• Support major security events where rapid technical investigation, exposure analysis and remediation prioritisation are required.
• Continuously improve how WPP understands exposure, identifying recurring patterns, challenging assumptions and helping us get better at finding the problems that actually matter.