Senior Cyber Security Testing Engineer

at  WPP

WPP is the creative transformation company. We use the power of creativity to build better futures for our people, planet, clients, and communities.

• Working under the direction and guidance of the Cyber Security Systems & Engineering Lead, and aligning with the Cyber Security testing strategy, build\maintain a global vulnerability management, vulnerability remediation and penetration-testing function.
• Deliver a line manager role to a global Cyber Security testing team.
• Work in collaboration with IT, Cyber Security and Group teams (such as Risk & Compliance & CSO) to design and deliver business aligned security testing solutions.
• Ensure accurate, pragmatic and timely technical Cyber Security Testing & Vulnerability guidance is provided to stakeholders.
• Develop and deliver Cyber Security testing artefacts including technical documentation, methodologies, standards, process\procedures, requirements, test plans and reports. Support and contribute to the delivery of a wider Information Security Management System.
• Work closely with the Cyber Security Systems & Engineering Lead, Security Operations and Technology Operations Teams to ensure the correct operation, and optimal configuration of Penetration testing, Vulnerability Management and remediation toolsets.
• Build and maintain knowledge and awareness security testing and vulnerability intelligence feeds (NCSC, CISA, SANS). Articulate vulnerability information into clearly defined business risk.
• Deliver and present appropriate KPI, KRI and other requisite reporting to the Cyber Security Systems & Engineering Lead and Head of Cyber Security Operations.
• Act as a Penetration Testing and Vulnerability Management SME for projects and initiatives relevant to the role. Provide a point of escalation to testing team members.
• Working closely with WPP technology and business teams, build professional relationships to ensure cooperation between stakeholders and Cyber Security Operations.
• Lead and direct third-party suppliers to ensure testing services are provided effectively, within project timescales and service level agreements.