Risk and Compliance Manager

·
Full time
Location: London
·
Job offered by: WPP
·
WPP

WPP is the creative transformation company. We use the power of creativity to build better futures for our people, clients, and communities. Working at WPP means being part of a global network of more than 115,000 accomplished people in 110 countries. WPP has headquarters in New York, London, and Singapore and a corporate presence in major markets worldwide. We create transformative ideas and outcomes for our clients through an integrated offer of communications, experience, commerce, and technology. The Creative IT team in Enterprise Technology are the technology solutions partner for the creative agencies, VML, Ogilvy, and AKQA/Grey and are accountable for coordinating and assuring end-to-end change delivery, managing the creative agencies technology life cycle and innovation pipeline. The Cyber, Risk & Compliance (CRC) team in the Creative Cluster is responsible for ensuring safe and secure IT operations, protecting our customers, employees, and shareholders, whilst making sure we remain compliant with our legal, regulatory, and contractual obligations. As a Risk & Compliance Manager you will play a critical role in developing and implementing a world-class risk and compliance programme in the Creative Cluster. You will operate in a highly complex environment with multiple risk categories, including IT operations, information security, legal, regulatory, financial, and commercial with broad impacts spanning both the Creative Cluster and the WPP Group. You’ll have a deep understanding of the information security risk standards, frameworks, and methodologies we can use to strengthen our risk and compliance posture. You will work across all agencies part of the Creative Cluster to implement agreed processes and practices mandated by WPP Risk & Compliance function. What you'll be doing: Establish risk & compliance community across agencies to drive the implementation and standardisation of risk & compliance approach Work to strengthen Archetype’s DR strategy and approach, working with Creative Cluster’s Cyber Risk & Compliance Director, Platform Director and other IT stakeholders Conduct and support IT Risk Assessments – e.g., quarterly risk landscaping - owning and driving Creative Cluster-specific risk mitigation actions Respond to tracking and reporting from Internal, External or Client Audit findings within the Creative Cluster Support self-certification and self-monitoring for IT controls, and maintain an active liaising channel with the IT Ops function at WPP group level Work across the Creative Cluster teams like Platforms, Tech Ops, and WPP CISO Office to design controls, deliver management information (KRIs) and risk mitigation plans Drive engagement, comms and adoption for all risk and compliance tasks to ensure the rationale for task is understood, the mandate is embedded, and colleagues and partners are trained and can perform effectively and efficiently. Ensure that Creative Cluster remains compliant with national legislative, regulatory, contractual and WPP security governance obligations. Be responsible for managing a team of risk and compliance analysts to support business functions in EMEA, AMER & APAC regions. What you'll need: Risk and Compliance subject-matter-expert with in-depth knowledge of security governance in the cloud and on-prem IT technologies Comprehensive knowledge about Information Security risk standards, frameworks and best practices (i.e., ISO27K1, NIST, CIS, SOC:1-2 Cyber Essentials, GDPR) Degree or equivalent (i.e. BSc, BEng, MSc) desirable but not essential Certifications in security (i.e. CISA, CRISC, CISSP, CISM) desirable but not essential Good understanding of managing internal and external audits (i.e., SOC:1-2, SOX) and assurance activities, including testing the design and operational effectiveness of security controls Ability to provide leadership on complex and unfamiliar situations, often involving risk and emotion Expert communicator with a track record of operating, partnering with and influencing up to and including exec-level stakeholders Good knowledge of qualitative, quantitative information security risk methodologies, and/or experience working with ISO31000 enterprise risk management standard Ability to operate and lead in a fast-paced organizational transformation and able to navigate and champion change across organisational/geographical complexity A genuine desire to lead, develop, coach and mentor direct reports/team members Who you are: You’re open:

We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working. You’re optimistic:

We believe in the power of creativity, technology and talent to create brighter futures for our people, our clients and our communities. We approach all that we do with confidence: to try the new and to seek the unexpected. You’re extraordinary:

we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we deliver extraordinary every day. What we'll give you: Passionate, driven people:

We champion a culture of people that do extraordinary work. Scale and opportunity:

We offer the opportunity to create, influence and deliver projects at a scale that is unparalleled in the industry. Challenging and stimulating work:

Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge? WPP is an equal opportunity employer

and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability. We believe in creating a dynamic work environment that values diversity and inclusion and strives to recruit a diverse slate of candidates to help us achieve that goal.

#J-18808-Ljbffr

Recent Jobs

London (On site) · Full time

Are you a smart, driven professional who takes pride in making a difference in local communities? Turner & Townsend’s Real Estate division is experiencing significant growth and we’re looking for an experienced industry professional with health project experience to join our high-performing and collaborative Project Management team. Why Join Us? Impactful Work: Contribute to social [...]Read More... from Assistant Project Manager – Healthcare See details

Chasetown (On site) · Full time

My client, Autosmart International are a manufacturing success story! Site Operations Manager – leading fast-paced manufacturing and warehousing About Our Client Autosmart International is a manufacturing success story, leading the field in vehicle cleaning products. We are the No.1 choice of automotive trade customers across the UK. We have doubled in size in the last [...]Read More... from Site Operations Manager See details

London (On site) · Full time

CSS are looking for an experienced duty officer to join our client’s team who are a local council responsible for all areas within the Tendering district. Working hours: All shifts are 8 hours long with various start times available: Monday to Friday – start times between 6AM – 3PM Saturday & Sunday – 6AM – [...]Read More... from Duty Officer See details