{"id":19107,"url":"https://alion.io/job/wpp-technical-security-governance-lead-software-development-open","title":"Technical Security Governance Lead - Application Security","company":{"id":5467,"name":"WPP","domain":"wpp.com","url":"https://alion.io/company/wpp","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":85,"open_postings":35,"ghost_share":0,"stale_share":0.6,"repost_share":0,"time_to_fill_p50_days":57,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":93000,"max_usd":182000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":8},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"OWASP","optional":true},{"name":"OWASP ASVS","optional":true},{"name":"OWASP SAMM","optional":true},{"name":"SLSA","optional":true}],"status":"live","first_seen_at":"2026-07-21T12:27:58Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-12T18:06:34Z","board_verified":true,"closed_at":null,"days_open":114,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":114},"description":"WPP is the trusted growth partner for the world’s leading brands. \nWe unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company - powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. \n\nWe work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.\n\nOur people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. \n\nFor more information, visit WPP.com.\n\nWhy we'rehiring \nWe are looking for a Lead Application Security Engineer to strengthen Secure Development across WPP. \nWorking within TSG, you will partner with software engineers, architects and product teams to establish practical security guardrails, help teams build the capabilities needed to meet them, and develop technical assurance that demonstrates whether those controls remain effective. \nYou will not own development pipelines, security tooling or software delivery. Instead, you will provide the technical leadership, evidence and challenge that helps engineering teams build security into the way they develop software and continuously improve their security practices. \nSuccess requires strong technical credibility with engineers, a practical understanding of modern software development, and the ability to influence technical outcomes without direct authority. \nThe role sits within Technical Security Governance (TSG), reporting to the Director, Security Governance & Posture within the Group CISO organisation. \n What you'llbe doing \nAct as WPP’s technical lead for Application Security, providing senior judgement on Secure Development, assuranceand software-securityrisk. \nUnderstand how software is designed, built, tested and released across WPP, identifyingwhere common guardrails and engineering capabilities will most improve security. \nDefine practical Secure Development guardrails across secure design, threat modelling, coding, dependencies, software supply chains, CI/CD, cloud-native and AI-enabled development. \nWork directly with software engineers, architectsand product managersto help establishthe security capabilities and practices needed to meet those guardrails. \nDevelop technical assurance capabilities that continuously demonstratewhether Secure Development controls are present, operatingand effective. \nUse engineering evidence, security toolingand targeted validation to identifygaps, challenge assumptionsand drive meaningful improvement. \nHelp engineering teams understand recurring weaknesses and improve their own ability to identify, prioritiseand address software-securityrisk. \nProvide evidence and technical challengewhere controls are ineffective or risks remain, while keeping implementation and remediation ownership with the teams responsible for the software. \nContinuously evolve WPP’s Secure Development approach as engineering practices, technologiesand threats change. \nOwn Application Security Risk Factors through their lifecycle, raising and documenting issues, advising teams on remediation, tracking progressand challenging where exposure is not being addressed effectively. \nWhat you'llneed \nEssentialcriteria: \nStrong practical understanding of modern software development and how security fits across design, development, testing, CI/CDand release. \nMeaningful experience in Application Security, Product Security, DevSecOpsor Secure Development, with enough technical depth to work credibly with software engineers and architects. \nAbility to translate security expectations into practical engineering guardrails that teams can understand and implement. \nStrong communicationand stakeholder skills, with the ability to work effectively with engineers, architects, product managersand senior management. \nSound technical judgement, balancing security outcomes with engineering constraints and knowing when to challenge and when different approaches can achieve the same outcome. \nAbility to lead through technical credibility, evidenceand influence rather than direct authority. \nNice to have: \nPrevioushands-on experience in software development, software engineering, DevOpsor a closely related engineering role; 5+ years would be particularly valuable. \nExperience establishingor improving Application Security, Secure Development or DevSecOpspractices with engineering teams. \nFamiliarity with common capabilities such as threat modelling, SAST, SCA, DAST, secretsdetection, CI/CD security, API securityor software-supply-chain controls. \nExperience using technology, automationor engineering evidence to provide security assurance at scale. \nExperience influencing technical decisions where security and delivery priorities compete. \nSecurity Champions, paved roads, developer enablementor similar experience. \nCloud-native, SaaS or highly distributed application experience. \nAI-enabled application or AI-assisted development security experience. \nOWASP SAMM, ASVS, NIST SSDF, SLSA or similar frameworks. \nWho you are:\nYou're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.\nYou're optimistic: We believein the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.\nYou're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.\nWhat we'll give you:\nPassionate, inspired people - We aim to create a culture in which people can do extraordinary work.\nScale and opportunity - We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.\nChallenging and stimulating work - Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?\n#LI-Hybrid \nWe believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process.\nWPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers.\nPlease read our Privacy Notice (https://www.wpp.com/en/careers/wpp-privacy-policy-for-recruitment) for more information on how we process the information you provide.","description_format":"text","description_chars":7162,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Application Security","Digital Marketing","Media & Audience Measurement"],"lifecycle":[{"event":"open","at":"2026-07-21T12:27:58Z"},{"event":"open","at":"2026-11-11T19:50:37Z"}],"visa":[],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.504,"p_room":0.36,"age_days":113,"expected_fill_days":57,"reasons":["conf:3","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-12T10:38:37Z"},"pay":null,"html_url":"https://alion.io/job/wpp-technical-security-governance-lead-software-development-open","json_url":"https://alion.io/job/wpp-technical-security-governance-lead-software-development-open.json","meta":{"generated_at":"2026-11-12T21:10:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":44785,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5467},"rest":"https://alion.io/mcp/rest/get_company?id=5467"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwpp-technical-security-governance-lead-software-development-open"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwpp-technical-security-governance-lead-software-development-open"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwpp-technical-security-governance-lead-software-development-open"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/wpp-technical-security-governance-lead-software-development-open\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwpp-technical-security-governance-lead-software-development-open"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":19107}},{"tool":"search_jobs","arguments":{"company":"wpp.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":19107},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}