Technology Risk & CRC Strategy Director

WPP is the creative transformation company. We use the power of creativity to build better futures for our people, planet, clients, and communities.

Working at WPP means being part of a global network of more than 100,000 talented people dedicated to doing extraordinary work for our clients. We operate in over 100 countries, with corporate headquarters in New York, London and Singapore.

WPP is a world leader in marketing services, with deep AI, data and technology capabilities, global presence and unrivalled creative talent. Our clients include many of the biggest companies and advertisers in the world, including approximately 300 of the Fortune Global 500.

Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.

Why we're hiring:

WPP ET provides IT services for WPP, group owned operating companies and agencies. The WPP group is the world’s largest communications services group, and as a creative transformation company, WPP is helping its clients transform the future through extraordinary work. The ET function is an integral part of that journey, and we are proud to provide technology for some of the world’s most creative brands.

Leading the development and execution of WPP’s enterprise technology risk management framework, CRC discipline strategy, transformation portfolio, financial management and functional reporting.

What you'll be doing:

• Define and lead WPP’s ET group risk and issue management framework, and support the development of policies, standards and technology controls.

• Lead enterprise-wide technology risk assessments, threat modelling and scenario planning, providing executive risk insights to inform strategy, investment and prioritisation decisions.

• Maintain and govern technology risk registers and issue tracking, whilst overseeing remediation planning, risk mitigation programmes and risk acceptance processes.

• Strengthen technology and operational security resilience practices through continuity planning, testing cycles and scenario exercises.

• Define and develop CRC’s functional vision, objectives and strategy, aligning with WPP’s strategic priorities, and provide counsel to senior stakeholders regarding transformation and broader strategic alignment.

• Provide oversight for business case development of new demand across CRC, and oversee demand forecasting, planning and management (inc. monitoring and performance) aligned with portfolio governance requirements.

• Drive embedding of operational security capabilities, controls and technology risk requirements into MA&D processes.

• Engage with key stakeholders in enterprise technology, group functions and agencies, ensuring clear communication and transparency on technology risk, strategy and portfolio initiatives.

• Collaborate with Finance, CRC Leadership and stakeholders within global functions and agencies to oversee CRC functional budget setting and monitor in-year spending. Oversee business case spend and manage value creation targets and realisation.

• Establish and develop a central risk, strategy and transformation office within CRC with the necessary skills, providing line management, talent development, and overseeing team performance and deliverables.

• Drive standardisation and maturity of reporting inc. key metrics for board, senior leadership and operational levels. Support planning and coordination of CRC leadership and governance forums, and deputise for the Chief Cyber, Risk and Compliance Officer as required.

.Who you'll be working with:

• Enterprise Technology Leadership Team

• Cyber, Risk & Compliance Leadership Team

• ET Strategy & Transformation Directors (Clusters & GDs)

• Global Functional Leads (Finance, Legal, DPO, CISO Office)

• Internal Audit and External Assurance Partners

• Strategic Third-Party Partners

What you'll need:

• Experience leading technology & security risk management programs

• Experience within security strategy and transformation

• Strong knowledge of risk & technology compliance frameworks (inc. ISO27001/31000, SOX, SOC2)

• Demonstrable experience working with internal audit, external assurance providers and regulators

• Deep expertise in Operational Security (Cyber), Technology Risk Management & Compliance

• Proficiency in data-driven risk analytics, reporting and metrics development.

• Technology resilience and contingency planning, testing and strategy

• Drive for results

• Great communicator & collaborator

• Stakeholder Management & Influencing

• Strategic thinking and development

• Programme management

• Business case development & benefits tracking

• Financial management inc. budgeting

• Problem-solving & Innovation

• Strong People Leadership – virtual & direct

Who you are:

You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.

You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.

You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:

Passionate, inspired people – We aim to create a culture in which people can do extraordinary work.

Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.

Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?

#LI-Onsite

We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process.

WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers.

Please read our Privacy Notice (https://www.wpp.com/en/careers/wpp-privacy-policy-for-recruitment) for more information on how we process the information you provide.