Technical Security Governance Lead - Application Security
Confirmed on the employer's own hiring board on Nov 12, 2026. First seen by Alion on Jul 21, 2026. WPP scores A on the Alion truth index.
WPP is the trusted growth partner for the world’s leading brands.
We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company - powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.
We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.
Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.
For more information, visit WPP.com.
Why we'rehiring
We are looking for a Lead Application Security Engineer to strengthen Secure Development across WPP.
Working within TSG, you will partner with software engineers, architects and product teams to establish practical security guardrails, help teams build the capabilities needed to meet them, and develop technical assurance that demonstrates whether those controls remain effective.
You will not own development pipelines, security tooling or software delivery. Instead, you will provide the technical leadership, evidence and challenge that helps engineering teams build security into the way they develop software and continuously improve their security practices.
Success requires strong technical credibility with engineers, a practical understanding of modern software development, and the ability to influence technical outcomes without direct authority.
The role sits within Technical Security Governance (TSG), reporting to the Director, Security Governance & Posture within the Group CISO organisation.
What you'llbe doing
- Act as WPP’s technical lead for Application Security, providing senior judgement on Secure Development, assuranceand software-securityrisk.
- Understand how software is designed, built, tested and released across WPP, identifyingwhere common guardrails and engineering capabilities will most improve security.
- Define practical Secure Development guardrails across secure design, threat modelling, coding, dependencies, software supply chains, CI/CD, cloud-native and AI-enabled development.
- Work directly with software engineers, architectsand product managersto help establishthe security capabilities and practices needed to meet those guardrails.
- Develop technical assurance capabilities that continuously demonstratewhether Secure Development controls are present, operatingand effective.
- Use engineering evidence, security toolingand targeted validation to identifygaps, challenge assumptionsand drive meaningful improvement.
- Help engineering teams understand recurring weaknesses and improve their own ability to identify, prioritiseand address software-securityrisk.
- Provide evidence and technical challengewhere controls are ineffective or risks remain, while keeping implementation and remediation ownership with the teams responsible for the software.
- Continuously evolve WPP’s Secure Development approach as engineering practices, technologiesand threats change.
- Own Application Security Risk Factors through their lifecycle, raising and documenting issues, advising teams on remediation, tracking progressand challenging where exposure is not being addressed effectively.
What you'llneed
Essentialcriteria:
- Strong practical understanding of modern software development and how security fits across design, development, testing, CI/CDand release.
- Meaningful experience in Application Security, Product Security, DevSecOpsor Secure Development, with enough technical depth to work credibly with software engineers and architects.
- Ability to translate security expectations into practical engineering guardrails that teams can understand and implement.
- Strong communicationand stakeholder skills, with the ability to work effectively with engineers, architects, product managersand senior management.
- Sound technical judgement, balancing security outcomes with engineering constraints and knowing when to challenge and when different approaches can achieve the same outcome.
- Ability to lead through technical credibility, evidenceand influence rather than direct authority.
Nice to have:
- Previoushands-on experience in software development, software engineering, DevOpsor a closely related engineering role; 5+ years would be particularly valuable.
- Experience establishingor improving Application Security, Secure Development or DevSecOpspractices with engineering teams.
- Familiarity with common capabilities such as threat modelling, SAST, SCA, DAST, secretsdetection, CI/CD security, API securityor software-supply-chain controls.
- Experience using technology, automationor engineering evidence to provide security assurance at scale.
- Experience influencing technical decisions where security and delivery priorities compete.
- Security Champions, paved roads, developer enablementor similar experience.
- Cloud-native, SaaS or highly distributed application experience.
- AI-enabled application or AI-assisted development security experience.
- OWASP SAMM, ASVS, NIST SSDF, SLSA or similar frameworks.
Who you are:
You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.
You're optimistic: We believein the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.
You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.
What we'll give you:
Passionate, inspired people - We aim to create a culture in which people can do extraordinary work.
Scale and opportunity - We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.
Challenging and stimulating work - Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?
#LI-Hybrid
We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process.
WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers.