Technical Security Governance Lead - Exposure Management

São Paulo, Brazil · Posted Nov 9, 2026

WPP is the trusted growth partner for the world’s leading brands. 

We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. 
 
We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.
 
Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. 
 
For more information, visit WPP.com.
 

Why we're hiring:

We are looking for a Lead, Exposure Management to provide deep technical investigation of security exposures across WPP’s global technology estate. Working within Technical Security Governance (TSG), you will investigate vulnerabilities and potential attack opportunities across a diverse environment spanning cloud, infrastructure, operating systems, identity, applications, AI and emerging technologies.Using modern security, exposure management and adversarial-testing capabilities, you will determine whether weaknesses are genuinely exploitable, how they could combine into realistic attack paths, and which exposures require the greatest attention.

This is a hands-on technical role with enterprise-wide reach. You will investigate complex security issues, identify systemic patterns and translate technical findings into clear, risk-based priorities for remediation teams.Your focus will be on establishing the technical reality, determining what matters most and directing attention towards improvements that meaningfully reduce WPP’s security exposure.

The role sits within TSG, reporting to the Director, Security Governance & Posture within the Group CISO organisation.

What you'll be doing:

Key Responsibilities
  • Act as WPP’s technical lead for Exposure Management, providing senior judgement on attack paths, vulnerabilities and systemic exposure across the global technology environment.
  • Investigate security exposures across cloud, infrastructure, operating systems, identity, applications, data and AI, going beyond tool outputs to establish what is genuinely exploitable.
  • Analyse how weaknesses connect and distinguish material enterprise risk from isolated or lower-priority findings.
  • Set clear technical priorities for mitigation, helping teams focus on the exposures that will most meaningfully improve WPP’s security posture.
  • Partner with TSG specialists across Cloud, Identity, Data, Infrastructure, Applications and AI to develop technically credible recommendations for system owners.
  • Provide deep technical security expertise on complex issues, including encryption, security tooling, emerging technologies and evolving threats.
  • Support major security events requiring rapid technical investigation, exposure analysis and remediation prioritisation.
  • Continuously improve WPP’s approach to exposure management by identifying recurring patterns, challenging assumptions and focusing attention on the issues that matter most.

What you'll need:

Essential skills and experience
  • Strong hands-on experience in technical security, with practical experience investigating, defending or validating real-world enterprise technology environments.
  • Solid technical foundations across areas such as cloud, infrastructure, networks, operating systems, identity, applications or security operations, with the ability to understand how weaknesses can interact across different domains.
  • Practical understanding of both attacker and defender perspectives, including vulnerabilities, exploitability, attack paths and defensive controls.
  • Strong investigative and critical-thinking skills, with the curiosity to challenge assumptions, look beyond tool outputs and follow the evidence.
  • Good technical judgement, with the ability to distinguish between interesting findings and exposures that represent a meaningful enterprise security risk.
  • Ability to translate complex findings into clear priorities and practical recommendations for technical teams.
  • Strong communication and collaboration skills, with the ability to work effectively with both technical specialists and senior stakeholders in a global environment.
  • Ability to work primarily from WPP’s São Paulo office as part of the wider security team.

Desirable skills and experience

  • Experience in one or more areas such as Red Team, Blue Team, Purple Team, Vulnerability Management, Exposure Management, Security Engineering, Security Research, adversarial validation or attack-path analysis.
  • Experience working across multiple technology domains and investigating how vulnerabilities or weaknesses can combine to create broader exposure.
  • Familiarity with enterprise vulnerability, attack-surface, exposure, BAS or security-posture platforms, particularly where multiple data sources need to be correlated.
  • Experience investigating security across areas such as cloud, identity, applications, data, AI or emerging technologies.
  • Experience supporting major security incidents, urgent remediation programmes or complex investigations.
  • Experience improving security methodologies, processes, metrics or approaches to risk prioritisation.
  • A track record of working with autonomy, navigating ambiguity and influencing technical outcomes through expertise, evidence and collaboration.
  • Relevant technical education or certifications can be beneficial, but practical experience, technical curiosity and demonstrated judgement are equally valued.

Who you are:

You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.

You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.

You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:

Passionate, inspired people – We aim to create a culture in which people can do extraordinary work.

Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.

Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?

#LI-Hybrid 

We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process.

WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers.

Please read our Privacy Notice (https://www.wpp.com/en/careers/wpp-privacy-policy-for-recruitment) for more information on how we process the information you provide.