Director of Cyber, Risk & Compliance - Corporate

at  WPP

WPP is the creative transformation company. We use the power of creativity to build better futures for our people, planet, clients, and communities.

• Adapt and implement the global cybersecurity strategy for the Corporate cluster, ensuring seamless alignment with WPP’s overall Technology Operations and cybersecurity posture.
• Lead the implementation of robust security architectures, policies, procedures, and controls, as defined by the global cybersecurity program, to protect the confidentiality, integrity, and availability of cluster data and systems.
• Implement and maintain a comprehensive IT risk management framework for the Corporate cluster, aligning with the global framework and encompassing risk identification, assessment, analysis, response, and monitoring.
• Conduct regular risk assessments and audits to proactively identify and prioritize ET risks, developing and executing mitigation plans to address identified vulnerabilities. Escalate critical risks to the global team as needed and report findings to both cluster and global stakeholders.
• Own the risk register for the Corporate cluster, conducting regular risk reviews and ensuring its accuracy and completeness.
• Conduct regular audits and assessments to monitor compliance with security policies and regulatory requirements, identifying areas for improvement and reporting findings to both cluster and global stakeholders.
• Lead, motivate, and develop a high-performing team of cyber risk and compliance professionals within the cluster, fostering a culture of collaboration, accountability, and continuous improvement, aligned with the global Cyber Risk and Compliance culture.
• Build and maintain strong relationships with key stakeholders across the cluster, including business leaders, ET colleagues, legal and compliance teams, and external auditors, ensuring alignment with global stakeholder management practices.
• Communicate effectively with stakeholders at all levels, providing regular updates on the cluster’s cybersecurity posture, risk management activities, and compliance status, utilizing global communication channels and reporting structures.