Business Security Services Director, WPP Production

Why we're hiring:

What you'll be doing:

• Security Leadership:
• Serve as the primary point of contact for all Digital Security matters within your region.
• Collaborate with business leadership, WPP Digital Security and Enterprise Technology Cyber teams to align security efforts with business goals.
• Act as the primary liaison between the business and WPP Digital Security and Cyber Security functions, ensuring that business needs and perspectives are considered in WPP Digital Security strategy development.
• Collaborate with the Enterprise Technology, Technology Compliance team to ensure that business operations comply with IT Compliance requirements.
• Advocate for business security needs and ensure they are considered in the development of WPP security policies and initiatives.

• Collaboration with WPP Digital Security & Risk Functions:
  • In conjunction with the Digital Security Awareness team, develop and deliver tailored security awareness programs to educate business employees on best practices and WPP policies.
  • Promote a culture of security awareness and ensure ongoing engagement at all levels of WPP and its Operating Companies in region.
• Strategy and Risk: Work closely with the Digital Security Strategy and Risk teams to ensure that business security risks are identified, assessed, and integrated into the broader WPP risk management framework. Work with the Governance team to ensure that business security practices adhere to WPP policies, standards, and regulatory requirements. Partner with the Client Assurance team to support client security requirements, respond to security inquiries, and assist in the preparation of security documentation for clients. Partner with Vendor and Supply Chain team to assess and manage the security posture of business vendors, ensuring that they meet WPP security standards.
• Security Awareness & Training:
• Product Security: Collaborate with the Digital Security Product & AI Security team to ensure that security is integrated into the development and deployment of products and services within the region, aligning with product security standards.
• Corporate Investigations: Ensure any Operating Companies investigations and data/evidence acquisitions is conducted following WPP polices and process.

• Incident Response:
• Coordinate and manage the response to security incidents within the region, working closely with the Enterprise Technology Cyber Incident Response team.
• Lead investigations for the business and ensure timely reporting and remediation of security breaches.

• Compliance & Regulatory Requirements:
• Ensure that business operations comply with applicable local and international security laws, regulations, and standards.
• Collaborate with the Technology Compliance team to ensure that business operations comply with ET Compliance requirements.
• Provide cybersecurity-specific assistance with business audits and ensure that all compliance-related activities are documented and addressed.

• Reporting & Metrics:
• Provide regular updates to the Global CISO and business leadership on the status of security initiatives, risk assessments, and incidents.
• Working closely with the Technical Security Governance team, develop and track key performance indicators (KPIs) to measure the effectiveness of the business Digital Security program.

What you'll need:

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• Significant experience in information security, and experience within a leadership role.
• Strong understanding of global and regional security standards and regulations (e.g., GDPR, ISO 27001).
• Experience in a global, multi-national organisation.
• Proven track record in risk management, incident response, and security policy implementation.
• Demonstrated experience in working with global teams and functions.
• Excellent communication and interpersonal skills, with the ability to influence stakeholders at all levels.
• Relevant certifications such as CISSP, CISM, or CISA are highly desirable.

• Strategic thinker with the ability to align security initiatives with business goals.
• Proactive, with a strong sense of ownership and accountability.
• Ability to work effectively in a fast-paced, dynamic environment.
• Culturally aware and capable of working with diverse teams across different regions.
• Strong collaborative skills to work effectively with global teams and functions.

Who you are: