---
title: 'Technical Security Governance Lead - Cloud, Vulnerability Management at WPP'
canonical: 'https://feeny.ai/job/technical-security-governance-lead-cloud-vulnerability-management-wpp-sao-paulo-5zrdbm0h6d03'
type: 'job'
last_seen: '2026-09-05'
---

# Technical Security Governance Lead - Cloud, Vulnerability Management at WPP

- **Company:** WPP
- **Location:** São Paulo, Brazil
- **Posted:** 2026-07-27
- **Last confirmed live:** 2026-09-05
- **Apply:** https://job-boards.greenhouse.io/wpp/jobs/8636392002

## Job description

WPP is the trusted growth partner for the world’s leading brands.

We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.

We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.

Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.

For more information, visit [WPP.com.](https://eur02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwpp.com%2F&data=05%7C02%7CErica.Durr%40wpp.com%7C9bf4566a65bc46a48ac008de749116ea%7C150b5e663d884dee83f6ed149b727a00%7C0%7C0%7C639076363668176216%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Q9juosud56XGLThSFZ1NpPZd6FXpJPxV74OeRZWoh%2B4%3D&reserved=0)

Why we're hiring:

We are looking for a Technical Security Governance Lead – Cloud & Vulnerability Management to help shape and strengthen the security posture of one of the world’s largest technology and creative ecosystems.

This role is responsible for leading security governance across our cloud and vulnerability management domains. You will define enforceable technical guardrails, minimum baselines, and remediation expectations across global cloud platforms, workloads, identities, and infrastructure.

As a strategic lead, you will provide independent oversight and collaborative challenge to engineering, infrastructure, and product teams—ensuring technical risks are consistently identified, prioritized, and remediated at scale. This is an opportunity to bring clarity, challenge, and strategic oversight to complex technical environments, focusing on overall posture, risk reduction, and governance discipline rather than operational day-to-day patching.

What you'll be doing:

Technical Security Governance & Assurance

- Define and maintain technical governance guardrails, baselines, and posture expectations across cloud and vulnerability domains.
- Translate enterprise policy and risk appetite into actionable, practical technical standards for engineering and product teams.
- Provide independent challenge and strategic oversight where remediation plans or accepted risks exceed WPP's tolerance.
- Support compliance monitoring by partnering with product security to align technical evidence with audits, ISO, SOC, and internal assurance programs.

Cloud Security Governance

- Define mandatory cloud guardrails across multi-cloud environments, focusing on key areas such as identity, logging, encryption, secrets management, and network segmentation.
- Govern multi-cloud posture and monitor systemic control gaps across global tenants, workloads, and environments.
- Define acceptable cloud exposure principles and blast-radius containment strategies to minimize real-world impact.
- Collaborate with platform and infrastructure teams to review architecture, identify exposure, and improve cloud security maturity.

Vulnerability Management Governance

- Own and govern the vulnerability lifecycle across infrastructure, endpoints, cloud workloads, containers, applications, and APIs.
- Define modern, risk-based prioritization models using asset criticality, exposure context, and intelligence sources (e.g., CVSS, EPSS).
- Establish remediation SLAs and expectation models, actively challenging backlog growth and SLA breaches while governing the exception process.
- Validate remediation effectiveness and drive consistency in how global teams address and reduce critical exposures.

Collaboration & Stakeholder Engagement

-

- Partner closely with Platform Engineering, Infrastructure, Product Security, and Risk teams to maintain aligned risk visibility.
- Enable engineering teams to build securely and move quickly within defined guardrails.
- Help improve how technical risk and security trends are measured, prioritized, and communicated to leadership.

What you'll need:

Experience & Qualifications:

- 5+ years of experience in cloud security, vulnerability management, or technical security governance.
- Strong hands-on or governance knowledge of major cloud platforms (AWS, GCP, and Microsoft Azure).
- Deep understanding of:
- Cloud Native Application Protection Platforms (CNAPP) and Cloud Security Posture Management (CSPM).
- Vulnerability lifecycle management and modern risk-based prioritization.
- Cloud identity, access models, and modern attack paths.
- Strong communication and stakeholder engagement skills, with the ability to influence and challenge engineering and security teams in a matrixed organization.
- Education & Certifications: Bachelor’s degree in Information Security, Computer Science, or a related field (or equivalent experience). CISSP, CISM, CCSP, or CISA certifications are highly desirable.

Personal Attributes:

-

- Strategic & Impact-Focused: Ability to align technical security initiatives with global business goals.
- Proactive Leader: A strong sense of ownership and accountability, with the confidence to drive corrective action.
- Adaptable & Collaborative: Culturally aware and capable of working effectively with diverse, global teams in a fast-paced environment.

Who you are:

You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.

You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.

You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:

Passionate, inspired people – We aim to create a culture in which people can do extraordinary work.

Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.

Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?

#LI-Hybrid We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process.

WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers.

Please read our Privacy Notice (https://www.wpp.com/en/careers/wpp-privacy-policy-for-recruitment) for more information on how we process the information you provide.

## About WPP

## Company Overview
- **One-liner**: WPP is the world’s largest advertising and marketing services group, helping leading brands navigate change and deliver growth through media, creative, production, and enterprise solutions.
- **Entity Type**: Public (LSE: WPP, NYSE: WPP)
- **Headquarters**: London, United Kingdom
- **Founded**: 1971 (by Sir Martin Sorrell)
- **Founders**: Sir Martin Sorrell

## Core Business
- **Primary industry**: Advertising, Marketing, Media, Public Relations, Digital Services
- **Target customers**: B2B and B2C enterprise clients – global brands, retailers, and government organisations
- **Mission or purpose statement**: “Trusted growth partner for the world’s leading brands” – aligning success with clients, people, and partners to deliver transformation and growth.

## Products & Services
- **WPP Media**: Media planning, buying, and data-driven audience targeting across all channels.
- **WPP Creative**: Brand building, advertising, content creation, and storytelling with AI-enabled personalisation.
- **WPP Production**: Next-generation production services using generative AI to accelerate timelines and reduce costs.
- **WPP Enterprise Solutions**: Transformative enterprise technology, customer experience, and commerce solutions.
- **WPP Open**: Pioneering agentic marketing platform that unifies data, AI agents, and human talent in a single secure workspace for end-to-end marketing planning and execution.

## Market Standing
- **Valuation/Market Cap**: ~£10 billion (approx. $12.5 billion) as of mid-2025 (market data from LSE)
- **Key Metric**: Annual revenue of £14.8 billion (2024 full year)
- **Notable Investors/Partners**: Institutional investors; technology partners include Adobe, Google, Microsoft, and leading AI innovators.
- **Growth Signals**:
  - Launch of WPP Open, an AI-powered agentic platform that securely connects client data for real-time optimisation.
  - Continued investment in generative AI for production and creative personalisation.
  - Global headcount of approximately 100,000 employees, with offices in over 100 countries.

## Competitive Advantages
- **Scale & Integration**: Only company that combines media, creative, production, and enterprise solutions under one roof, offering seamless end-to-end services.
- **WPP Open Platform**: Proprietary AI platform that differentiates by enabling privacy-safe, real-time marketing optimisation across all client touchpoints.
- **Deep Tech Partnerships**: Exclusive integrations with Google, Microsoft, Adobe, and AI startups, giving clients access to best‑in‑class innovation.
- **Talent & Culture**: Attracts top creative, data, and technology professionals; strong emphasis on internal mobility and cross‑discipline careers.

## Strategic Focus
- **AI‑First Transformation**: Embedding AI across all operations via WPP Open to automate routine tasks and elevate creative work.
- **Sustainability & Trust**: Embedding sustainability into client solutions and committing to transparency in data use and measurement.
- **Simplification**: Becoming simpler to work with – breaking down silos between operating units to deliver integrated outcomes.

## Why Work Here
- **Global Opportunities**: Work with iconic brands (e.g., Ford, Unilever, Google, Nestlé) across 100+ countries; careers span media, creative, tech, data, and production.
- **AI as a Teammate**: WPP positions AI as a force multiplier, not a replacement – giving employees the chance to focus on high‑value, creative work.
- **Culture of Belonging**: Emphasises openness, trust, and diversity; “Belonging isn’t a programme” – building a culture where people feel free to be themselves.
- **Growth & Mobility**: Designed for career mobility – move across disciplines, brands, and borders; continuous learning supported.
- **Work Environment**: Hybrid/remote arrangements vary by role and location; global campuses in London, New York, and other major cities designed to spark collaboration.
- **Perks & Benefits**: Competitive compensation, learning & development programmes, and a commitment to inclusive hiring (including use of AI tools to reduce bias in recruitment).

## Sources
1. [wpp.com - Company Overview](https://www.wpp.com/en/about)
2. [wpp.com - Careers](https://www.wpp.com/en/careers)
3. [wpp.com - Search & Apply](https://www.wpp.com/careers/search-and-apply)
4. [Greenhouse - Jobs at WPP](http://job-boards.greenhouse.io/wpp)

## Other roles at WPP

- [Senior Machine Learning Engineer](https://feeny.ai/job/senior-machine-learning-engineer-wpp-copenhagen-pa1gy9jxxx43) — Copenhagen, Denmark
- [Senior Analyst - Accounts Payable - US](https://feeny.ai/job/senior-analyst-accounts-payable-us-wpp-mumbai-msss96eckbgf) — Mumbai, India
- [Manager, Product Marketing](https://feeny.ai/job/manager-product-marketing-wpp-london-2nmmp3k1kc10) — London, United Kingdom
- [WPP Media | Senior Activation Executive, Japan](https://feeny.ai/job/wpp-media-senior-activation-executive-japan-wpp-tokyo-yymccajcz528) — Tokyo, Japan
- [WPP Production | Localization Delivery Manager](https://feeny.ai/job/wpp-production-localization-delivery-manager-wpp-tokyo-4ppfjvgefvfp) — Tokyo, Japan
- [Senior Analyst - Payroll](https://feeny.ai/job/senior-analyst-payroll-wpp-mumbai-m1x21w3x7c9h) — Mumbai, India
- [Director Thought Leadership](https://feeny.ai/job/director-thought-leadership-wpp-united-kingdom-fmk6zq3ahxsb) — United Kingdom
- [Financial Controller : 6 month FTC](https://feeny.ai/job/financial-controller-6-month-ftc-wpp-london-england-b93ck41ry94k) — London England, United Kingdom
- [Financial Controller](https://feeny.ai/job/financial-controller-wpp-london-england-pjrqtbmrdvnj) — London England, United Kingdom
- [Security Detection Engineer](https://feeny.ai/job/security-detection-engineer-wpp-chennai-tamil-nadu-888byzddvsp9) — Chennai Tamil Nadu, India