Cyber Risk Specialist

Roblox

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators.  At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there.  A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a founding member of the Security Operations team in EMEA, you will join us at an exciting time in Roblox’s SIRT & SOC program. You will design and build the detections, automation and tooling that let a lean team monitor and protect players, developers, employees and the platform at global scale and serve as security incident commander in the region. This is a highly autonomous role where you will be a primary decision-maker, core to our mission to maintain a highly capable 24/7/365 monitoring and response capability. While you will work in close collaboration with peers at our US West Coast Headquarters, the time difference requires an engineer who can operate independently, making critical decisions without immediate oversight. We favor engineering our way out of toil through automation, orchestration, detections-as-code, and risk-based prioritization, while retaining the deep technical skills required to conduct detailed, hands-on analysis and lead response end-to-end when the situation warrants. Work Environment: This role is based in London, UK. You will be working from a dedicated, private space located within a shared office environment, designed to enable collaboration while remaining secure. YOU WILL: * Build Detection & Response Systems: Design, write, and maintain production-quality detections, automations and integrations (detections-as-code, SOAR playbooks, data and enrichment pipelines) that scale our monitoring capability and reduce manual toil. * Own Tooling & Platform: Develop and improve the tooling the global SIRT/SOC depends on alert quality and enrichment, case-management integrations and automation that powers reliable "follow-the-sun" hand-offs. * Exercise High Autonomy: Act as the primary Incident Commander for the European time zone, making critical, time-sensitive decisions independently before US HQ comes online. You will serve as the senior-most security engineering point of contact in the region. * Drive Strategy & Architecture: Shape the technical direction of the detection & response engineering function, specifically architecting how global hand-offs and "follow-the-sun" models can be optimized and automated. * Command Security Incidents: Ensure serious threats and impacts are understood, mitigated, and learned from with speed and professionalism, often leading responses end-to-end without immediate escalation paths during local hours — and turning what you learn into durable, automated detections. * Conduct Forensic Investigations & Threat Hunt: Dig into complex context to determine whether threats exist, take decisive action and proactively hunt for anomalous activity in our signals, distinguishing outliers from threats. * Lead High-Profile Responses: Collaborate with Security and Engineering to lead responses to major vulnerabilities or platform-wide events. * Collaborate Cross-Functionally: Work with Legal, HR, Executive teams, and external partners (Developers & Customers). You will also travel semi-regularly to the USA to visit HQ, ensuring deep alignment with central engineering and security leadership. YOU HAVE: * Experience: 10+ years across security engineering, Infosec, IT, Infra/SRE, and/or Incident Response. * Specialization: 7+ years specifically in Detection or Response, with a track record of building, writing detections, automation or security tooling, not solely operating. * Engineering Proficiency: Comfortable writing and reviewing production-quality code (Scripting) and building automations, integrations and data pipelines that others depend on. * Autonomous Leadership: Proven ability to work independently in satellite offices or distributed teams. You are comfortable being the "person in charge" during your shift and making calls that impact the business. * Incident Command: Extensive experience operating as an incident commander. You can flex into deep engineering work but also possess the executive presence to coordinate responders and communicate status to leadership. * Investigations: Expert-level capability investigating threats in enterprise and production environments, taking ownership from identification to resolution. * Knowledge/Tools/Techniques: Deep understanding of security tooling (SIEM, EDR, IDS/IPS, NDR, SOAR) and experience extending or building on it. You are proficient in applying Incident Response frameworks (NIST IR Lifecycle, Cyber Kill Chain, MITRE ATT&CK) to real-world scenarios, and you collaborate effectively with engineering colleagues, leveraging extensive expertise across infrastructure and technologies (Public Cloud, OS, Virtualization, Containerization, Networking, Build/Development infrastructure, and Hardware). * Education: Bachelor's degree in Computer Science, Cybersecurity, or a related technical field; advanced degree preferred or equivalent experience. YOU ARE: * A Builder-Operator: You would rather automate a problem out of existence than staff around it and you hold yourself to an engineering bar even under incident pressure. * A Strategic Self-Starter: You don't wait for instructions. You identify gaps in coverage — especially those unique to regional or time-zone-specific challenges — and fix them. * A Detailed Thinker: You enjoy exploring the details and considering the second- and third-order effects of your decisions. * An Eager Problem Solver: You are drawn to complex issues rather than avoidant of them. * Emboldened to Make Change: You instinctively ask what you can do to improve the situation rather than waiting to be prompted. * Compelled by our Mission: You are driven by the opportunity to protect our community and the safe space we've created. * A Calculated Risk Taker: You move fast, navigating reasonable risks to take action and build capabilities as quickly as possible. Roles that are based in an office are onsite Tuesday, Wednesday, and Thursday, with optional presence on Monday and Friday (unless otherwise noted). Roblox provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Roblox also provides reasonable accommodations to candidates with qualifying disabilities or religious beliefs during the recruiting process. For US based roles only, please note the Company may not be able to employ candidates for this role who have United States work authorization related to certain U.S. visa categories, or support future H-1B sponsorship at this time.

WPP

WPP is the trusted growth partner for the world’s leading brands.  We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.    We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.   Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.    For more information, visit WPP.com.   Why we're hiring: The Cyber Risk and Compliance team ensures that WPP Media are adhering to internal policies and procedures so that WPP Media meets regulatory, client and external audit requirements. The role is pivotal to embed robust Data & Technology controls, driving compliance with our policies, and ensuring audit readiness for obligations such as SOX 404 IO. As a key member of the Media compliance team, you will deliver control assurance and actively coach project teams, while also playing a strategic role in shaping the group’s compliance and controls posture to be more consistent, standardised, and repeatable. You will work closely with colleagues in Financial Risk and Control to ensure IT controls are fully aligned and integrated with financial controls. This role ensures project and delivery teams are equipped to demonstrate control performance clearly and consistently. The focus is on guiding teams to meet their obligations and targeting assurance activity where it adds the greatest value. What you'll be doing: * Be a key liaison with the markets to assist in timely completion of audits (internal, external or client), providing support and guidance as required * Communicate effectively with Control Owners, Operators, Business platform Directors and other senior stakeholders. * Ensure all stakeholders are informed about progress, risks, and issues. * Develop Standard Operating Procedures and Risk and Controls Matrix for application control environment * Play a key role in monitoring audit deficiencies - from challenging the validity of deficiencies in audit close meetings, to supporting markets in developing remediation plans * Review remediation documentation to ensure plan has been implemented correctly * Identify appropriate mitigating controls for audit deficiencies, considering both controls on the IT and financial framework which adequately addresses the risk identified * Perform detailed walkthroughs of automated controls, to review system configuration and ensure risk associated to the control has been addressed * Provide up to date reporting of audit readiness to the Director of CRC Media What you'll need: * Understands the importance of strong IT controls and maintaining a positive user experience * Prior experience in internal and external IT audits * Robust understanding in SOX controls framework. Experience working with external auditors on SOX compliance within large-scale transformation programmes. * Ability to work independently and proactively work on solutions to self-identified problems * Attention to detail - Applying quality standards to all tasks undertaken and ensuring that nothing is overlooked. * Ability to collaborate with business and technology stakeholders to explain the technology risk implications, and communicate in a language that is appropriate to the audience * Ability to adjust priorities and manage time appropriately and wisely in a fast-paced environment. * Strong interpersonal skills with the ability to build relationships across departments and global markets * Highly organised with ability to manage multiple projects simultaneously and to analyse data effectively, efficiently and accurately. * Prior exposure to data migration assurance and reconciliation processes. * Relevant experience and or professional certifications (e.g., CISA, CIA, CRISC) are advantageous. Who you are: You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working. You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected. You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.   What we'll give you: Passionate, inspired people – We aim to create a culture in which people can do extraordinary work. Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry. Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge? #LI-Hybrid  We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process. WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers. PLEASE READ OUR PRIVACY NOTICE (HTTPS://WWW.WPP.COM/EN/CAREERS/WPP-PRIVACY-POLICY-FOR-RECRUITMENT) FOR MORE INFORMATION ON HOW WE PROCESS THE INFORMATION YOU PROVIDE.

WPP

WPP is the trusted growth partner for the world’s leading brands.  We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.    We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.   Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.    For more information, visit WPP.com.   Why we're hiring: WPP Enterprise Technology provides technology services for WPP, the world’s leading creative transformation company. Within Enterprise Technology, Cyber, Risk & Compliance (CRC) plays a key role in strengthening operational resilience, governance, risk management and control effectiveness across a global technology estate. This is an exciting time to join CRC as we continue to modernise our operating model, increase automation, embrace AI-enabled ways of working and build new capabilities that help WPP move faster, more securely and with greater confidence.  The Technology Risk Analyst will support the day-to-day operation of WPP's Enterprise Technology Risk capability. Reporting to the Technology Risk Lead, the role will assist with maintaining risk and issue information, supporting risk reporting, coordinating stakeholder updates and helping ensure technology risk activity is well organised, accurate and easy to act on. The role will also support the maintenance of technology governing artefacts, including policies, frameworks, standards and procedures, by helping track ownership, review cycles, updates and publication readiness. This role is ideal for someone with a grounding in risk and governance, strong organisation skills and curiosity about technology, automation and AI-enabled ways of working.    What you'll be doing: * Support the maintenance of Enterprise Technology risk registers, issue logs, action trackers and supporting documentation.  * Assist with gathering risk updates from technology, security, assurance, resilience and operational teams.   * Help prepare risk reporting, dashboards, meeting materials and concise status updates for the Technology Risk Lead and wider Risk & Strategy team.   * Support basic risk and issue analysis, including identifying overdue actions, missing information, ownership gaps and recurring themes.   * Maintain organised records of technology governing artefacts such as policies, frameworks, standards and procedures, including review dates, owners, status and publication readiness.  * Coordinate follow-up with artefact owners and subject matter experts to help keep governance materials current, accessible and aligned to agreed processes.   * Support documentation quality checks, version control and repository housekeeping for risk and governance materials.   * Assist with evidence gathering for assurance, audit or governance activities where required.   * Use M365, workflow tools, reporting templates and AI-enabled productivity tools to reduce manual effort and improve consistency.   * Contribute to a collaborative, practical and continuous improvement culture within the new Risk & Strategy team.    What you'll need: * A grounding in risk, governance, compliance, audit, cyber security or a related area; extensive experience is not required.  * Strong organisational skills, attention to detail and ability to follow through on actions and deadlines.  * Ability to work with structured information such as registers, trackers, documentation inventories and reporting packs.   * Good written and verbal communication skills, with the ability to summarise information clearly and professionally.  * Comfortable working with a range of stakeholders and asking clear questions to clarify ownership, status or next steps.   * Curiosity about automation, reporting improvement and responsible use of AI to simplify routine risk and governance activity.   * A proactive, collaborative and learning-oriented mindset.    Who you are: You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working. You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected. You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.   What we'll give you: Passionate, inspired people – We aim to create a culture in which people can do extraordinary work. Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry. Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge? #LI-Hybrid  We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process. WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers. PLEASE READ OUR PRIVACY NOTICE (HTTPS://WWW.WPP.COM/EN/CAREERS/WPP-PRIVACY-POLICY-FOR-RECRUITMENT) FOR MORE INFORMATION ON HOW WE PROCESS THE INFORMATION YOU PROVIDE.