Technology Risk Senior Analyst

Why we're hiring:

The Technology Risk Senior Analyst will support the build-out and day-to-day operation of WPP’s Enterprise Technology Risk capability. Reporting to the Technology Risk Lead, the role will help identify, assess, document and monitor technology risks and issues across Enterprise Technology, support clear risk reporting for senior stakeholders, and work with risk owners to drive practical treatment and remediation activity. The role will suit a proactive risk professional who can combine technology understanding, analytical discipline and strong stakeholder engagement with a mindset for automation, AI-enabled process improvement and continuous simplification. 

This role sits within the new Risk & Strategy team and will help make technology risk management more data-led, automation-enabled and actionable for Enterprise Technology. 

What you'll be doing:

• Support the operation and continuous improvement of the Enterprise Technology risk management framework, standards and ways of working. 
• Coordinate and document technology risk assessments, issue reviews, control observations and risk treatment plans across Enterprise Technology. 
• Maintain accurate risk and issue records, ensuring owners, actions, due dates, evidence and status updates are complete and current. 
• Analyse risk data, audit findings, incidents, resilience outputs and control themes to identify trends, concentrations and emerging areas of exposure. 
• Prepare high-quality reporting, dashboards and briefing material for the key stakeholders and relevant technology governance forums. 
• Work with Enterprise Technology, Enterprise Security, Digital Security & Risk, DTS, Assurance and Operational teams to support remediation planning and monitor progress against agreed actions. 
• Provide constructive challenge on risk descriptions, treatment plans, closure evidence and risk acceptance proposals. 
• Support risk workshops, scenario discussions, governance meetings and stakeholder reviews, capturing clear outcomes and actions. 
• Identify opportunities to streamline risk management using workflow tools, automation, analytics and responsible AI-enabled approaches. 
• Act as a senior individual contributor within the team by coaching less experienced colleagues informally and promoting high standards of documentation, analysis and follow-through. 

What you'll need:

• Experience in Technology Risk inc. (Cyber) Security, Technology Governance & Controls Assurance. 
• Good understanding of technology environments such as security, cloud, infrastructure, identity, networks, end-user technology, service management, resilience and ITGCs. 
• Ability to analyse risk and control information and convert it into clear, actionable insight. 
• Experience maintaining risk registers, issue logs, remediation plans, governance packs or assurance documentation. 
• Strong written communication skills with the ability to produce concise, accurate and professional risk narratives. 
• Confident stakeholder engagement skills, including working with technical teams, control owners and governance stakeholders. 
• Strong attention to detail, organisation and follow-through across multiple workstreams. 
• Experience with reporting, workflow, GRC or data visualisation tools; Power BI, ServiceNow IRM, Drata or equivalent exposure would be helpful. 
• Interest in using automation, analytics and agentic AI to reduce manual effort and improve risk insight.