Technology Risk Senior Analyst
About this role
WPP is the trusted growth partner for the world’s leading brands.
We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.
We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.
Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.
For more information, visit WPP.com.
Why we're hiring:
The Technology Risk Senior Analyst will support the build-out and day-to-day operation of WPP’s Enterprise Technology Risk capability. Reporting to the Technology Risk Lead, the role will help identify, assess, document and monitor technology risks and issues across Enterprise Technology, support clear risk reporting for senior stakeholders, and work with risk owners to drive practical treatment and remediation activity. The role will suit a proactive risk professional who can combine technology understanding, analytical discipline and strong stakeholder engagement with a mindset for automation, AI-enabled process improvement and continuous simplification.
This role sits within the new Risk & Strategy team and will help make technology risk management more data-led, automation-enabled and actionable for Enterprise Technology.
What you'll be doing:
- Support the operation and continuous improvement of the Enterprise Technology risk management framework, standards and ways of working.
- Coordinate and document technology risk assessments, issue reviews, control observations and risk treatment plans across Enterprise Technology.
- Maintain accurate risk and issue records, ensuring owners, actions, due dates, evidence and status updates are complete and current.
- Analyse risk data, audit findings, incidents, resilience outputs and control themes to identify trends, concentrations and emerging areas of exposure.
- Prepare high-quality reporting, dashboards and briefing material for the key stakeholders and relevant technology governance forums.
- Work with Enterprise Technology, Enterprise Security, Digital Security & Risk, DTS, Assurance and Operational teams to support remediation planning and monitor progress against agreed actions.
- Provide constructive challenge on risk descriptions, treatment plans, closure evidence and risk acceptance proposals.
- Support risk workshops, scenario discussions, governance meetings and stakeholder reviews, capturing clear outcomes and actions.
- Identify opportunities to streamline risk management using workflow tools, automation, analytics and responsible AI-enabled approaches.
- Act as a senior individual contributor within the team by coaching less experienced colleagues informally and promoting high standards of documentation, analysis and follow-through.
What you'll need:
- Experience in Technology Risk inc. (Cyber) Security, Technology Governance & Controls Assurance.
- Good understanding of technology environments such as security, cloud, infrastructure, identity, networks, end-user technology, service management, resilience and ITGCs.
- Ability to analyse risk and control information and convert it into clear, actionable insight.
- Experience maintaining risk registers, issue logs, remediation plans, governance packs or assurance documentation.
- Strong written communication skills with the ability to produce concise, accurate and professional risk narratives.
- Confident stakeholder engagement skills, including working with technical teams, control owners and governance stakeholders.
- Strong attention to detail, organisation and follow-through across multiple workstreams.
- Experience with reporting, workflow, GRC or data visualisation tools; Power BI, ServiceNow IRM, Drata or equivalent exposure would be helpful.
- Interest in using automation, analytics and agentic AI to reduce manual effort and improve risk insight.
Desirable Qualifications
CRISC, CISA, foundational risk certifications, or equivalent professional experience are desirable
Who you are:
You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.
You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.
You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.
What we'll give you:
Passionate, inspired people – We aim to create a culture in which people can do extraordinary work.
Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.
Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?
We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process.
WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers.