Technology Assurance Senior Specialist

Why we're hiring:

The Technology Risk & Controls Analyst operates as part of the second line Technology Risk & Controls function, working under the direction of the Technology Risk & Controls Manager, Tech Ops. The role supports the delivery of independent assurance over Technology Operations control environments, including infrastructure, cloud platforms, identity and access management, service management and core operational processes.
The role is focused on executing high-quality control testing, audit support and remediation assurance activities in line with WPP standards and methodologies. The Analyst works closely with Technology Operations teams, Financial Risk & Control colleagues and auditors to evidence control performance, support audit readiness (including SOX 404) and contribute to a consistent, well-documented and sustainable control environment.

What you'll be doing:

•    Perform control design and operating effectiveness testing across Technology Operations processes, including change management, access management, incident/problem management, backup and resilience controls, under the guidance of the Manager
•    Support internal, external and client audits impacting Technology Operations, including preparation, coordination of evidence and response to audit queries
•    Liaise with Control Owners and Control Operators to obtain, validate and clarify audit evidence and control documentation
•    Maintain accurate and complete documentation of risks, controls, testing results and remediation activity in line with WPP assurance standards
•    Support the monitoring and tracking of audit deficiencies relating to Tech Ops control failures, including following up remediation actions
•    Review remediation evidence to confirm actions have been implemented as designed and address the underlying risk
•    Perform detailed walkthroughs of automated and manual controls to understand system configuration and operational execution
•    Identify and document potential mitigating controls for control gaps or deficiencies, escalating judgement areas to the Manager
•    Assist in the development and maintenance of Risk & Controls Matrices and Standard Operating Procedures for Technology Operations control environments
•    Prepare clear status updates and working papers for review by the Technology Risk & Controls Manager
•    Escalate control issues, evidence gaps or delivery risks promptly to ensure timely resolution

What you'll need:

•    Solid understanding of Technology Operations control environments, including ITGCs, IAM, infrastructure, cloud platforms and service management processes
•    Prior experience in internal or external IT audit, risk or controls assurance roles
•    Working knowledge of SOX 404 and experience supporting SOX audits within complex or large-scale technology environments
•    Ability to execute control testing accurately, consistently and in line with defined methodologies
•    Strong attention to detail with a focus on evidence quality and documentation standards
•    Ability to work proactively, managing assigned tasks and deadlines with minimal supervision
•    Strong communication skills, with the ability to explain control requirements clearly to technical and non-technical stakeholders
•    Effective time management skills and ability to operate in a fast-paced, multi-audit environment
•    Strong interpersonal skills with the ability to build constructive working relationships across global teams
•    Highly organised with the ability to manage multiple workstreams simultaneously
•    Exposure to data migration assurance and reconciliation processes is beneficial
•    Relevant certifications (e.g. CISA, CIA, CRISC) are advantageous

Who you are: