IT Security Lead, Kuala Lumpur

**WPP is the transformation company. We use the power of creativity to build better futures for our people, planet, clients, and communities.**

**Working at WPP means being part of a global network of more than 100,000 accomplished people in 110 countries. We create transformative ideas and outcomes for its clients through an integrated offer of communications, experience, commerce, and technology. WPP and our award-winning agencies work with most of the world's biggest companies and organisations - from Ford, Unilever and P&G to Google, HSBC, and the UN. Our clients include 61 of the FTSE 100, 325 of the Fortune Global 500, all 30 of the Dow Jones 30 and 62 of the NASDAQ 100.**

**WPP has headquarters in New York, London and Singapore and a corporate presence in major markets worldwide. We are quoted on the London Stock Exchange and the New York Stock Exchange. Key performance indicators for WPP (2020) include Billings of £46.9bn and Revenue of £12bn.**

**Visit our LinkedIn page to see what we're up to**

**Why we're hiring**:
WPP IT provides IT services for WPP, group owned operating companies and agencies. The WPP group is the world's largest communications services group, and as a creative transformation company, WPP is helping its clients transform the future through extraordinary work. WPP IT is an integral part of that journey, and we are proud to provide technology for some of the world's most creative brands.

As part of the organisational design initiative at WPP the Group CIO has created a new Target Operating Model (T.O.M), which consist of 4 distinct businesses in the group. These are: Integrated Creative, Media, Production, PR and Specialist - commonly termed as archetypes. S&H is one of these new archetypes in the WPP group with a mandate for providing common solutions, platforms and services for Production, PR & Specialist Agencies and WPP Corporate Functions.

**Specialist & Hogarth (S&H) Archetype**

The S&H archetype together with WPP IT are the technology solutions partner for WPP Corporate Functions, Production, PR & Specialist Agencies and are accountable for co-ordinating and assuring end-to-end change delivery, managing the IT technology life-cycle and innovation pipeline.

**Operation Assurance**

You will operate in a highly complex environment with multiple risk categories, including IT operations, information security, legal, regulatory, financial and commercial with broad impacts spanning both the S&H Archetype and the WPP Group.

You'll have a deep understanding of the information security standards, frameworks, and methodologies we can use to strengthen our security posture. You will work across all OpCo's and agencies part of the S&H archetype to implement agreed processes and practices mandated by WPP CSO organisation and WPP IT Security function.

You will have good understanding of managing security engineering lifecycles (from requirements analysis through to acceptance and early life support, and disposal.) Understanding of different lifecycles/methodologies (waterfall, incremental, agile, DevOps) would be beneficial, as embedding security from inception in all aspect of information technology will prevent security afterthoughts in designing and developing business critical IT solutions and services.

You'll be able to actively manage live security risk issues from an issue resolution and communication standpoint and be able to prioritise remediation to minimise impact to the S&H archetype and the WPP group.

**What you'll be doing**:

- Work closely with and assist OA department head in developing an IT Security strategy for the S&H archetype that is aligned to WPP CSO and WPP IT strategies.
- Establish IT security community across the range of S&H agencies to drive the implementation and standardisation of agreed security governance and controls
- Support IT security operations and design, providing critical Specialist and Hogarth Archetype context support and input to security assessments - including the consumption of security architecture, addressing security vulnerabilities, penetration testing and internal ethical hacking services
- Work closely with the IT Ops and CSO security teams to deal with security issues in the S&H archetype
- Drive the archetype's IT security strategy and approach, by working with S&H Archetype's Operations Assurance Lead, Strategy & Architecture and other IT stakeholders in the WPP Group
- Actively support archetype's BCP, DR and Resiliency planning initiatives and assist Rick & Compliance Lead with technical security operations knowledge
- Be S&H point of contact for relevant business stakeholder escalations relating to IT security operations. Lead and oversee resolution of the most complex, critical, and impactful security events and incidents in relation to information security
- Work across the S&H Archetype teams like Risk & Compliance, Global Technology Services, Digital Workplace and Strategy and Architecture to design contro