Security Awareness Specialist

WPP

WPP is the trusted growth partner for the world’s leading brands.  We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.    We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.   Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.    For more information, visit WPP.com.   Why we're hiring: We are looking to hire an individual that will own the identification, assessment, documentation and monitoring of digital and information security risks across WPP, ensuring risks are clearly articulated, consistently assessed and effectively tracked. What you'll be doing Risk Assessment & Management * Conduct enterprise and operational security risk assessments. * Ensure risk statements, impact and likelihood justifications are clear and defensible. * Maintain accurate and current risk records within approved GRC tooling. Risk Management * Conduct organisational-level, third-party or product risk assessments to identify technical, process and/or procedural vulnerabilities and recommend mitigation strategies. * Support the implementation of WPP’s Digital Security risk management framework, ensuring alignment with organisational goals. * Monitor and report on Key Risk Indicators (KRIs) to provide insights into WPP’s cybersecurity posture. Risk Treatment & Monitoring * Support risk owners in defining proportionate mitigation actions. * Track remediation progress and reassess residual risk. * Escalate material risk changes or overdue actions. What you'll need: Essential: * Fluent English (reading, writing, and conversation). * Bachelor’s degree in Information Security, Risk Management, or equivalent * Experience in cybersecurity governance, GRC, or risk support roles. * Strong understanding of cybersecurity policies, standards, and frameworks (e.g. ISO 27001, NIST CSF). * Ability to work with governance, assurance, and technical teams to maintain clear and usable frameworks. * Strong written communication skills, with high attention to accuracy and consistency. * Foundational understanding of cloud computing models (IaaS, PaaS, SaaS) and associated security risks. * Awareness of common cyber risk scenarios related to cloud platforms, SaaS environments, identity, and third-party integrations. * Exposure to emerging technology risks, such as AI-enabled systems, automation, and digital transformation initiatives. * Ability to assess risks across modern, distributed technology environments. * Foundational understanding of DevSecOps principles and secure-by-design approaches within modern software development lifecycles. * Ability to elevate the role to value-driven cyber risk management Nice - to- have * Certifications such as CISSP, CISM, or CRISC. * Familiarity with GRC tools and risk management platforms. * Working knowledge of agile methodologies. * Experience in multinational, multicultural and matrixed companies. Key Behaviours  & Competencies * Proactive Problem-Solving: Anticipates challenges in governance and compliance activities and develops effective solutions. * Collaborative: Builds strong relationships across teams (e.g., Legal, Enterprise Technology) to ensure alignment and efficiency. * Detail-Oriented: Ensures accuracy and consistency in governance documentation, role definitions, and standards. * Adaptable: Thrives in a fast-paced environment and adjusts quickly to changing priorities or regulatory requirements. * Ethical Integrity: Maintains high ethical standards, ensuring compliance with policies and safeguarding WPP’s reputation. * Analytical Thinking: Demonstrates strong analytical skills to interpret complex data and identify actionable insights. * Communication Skills: Clearly articulates findings, recommendations, and technical concepts to non-technical stakeholders. * Structured & Methodical: Applies a disciplined approach to governance maintenance and change control. * Collaborative: Works effectively with Strategy & Risk, TSG, Assurance, and Legal to support the governance lifecycle.   Who you are: You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working. You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected. You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.   What we'll give you: Passionate, inspired people – We aim to create a culture in which people can do extraordinary work. Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry. Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge? #LI-Hybrid  We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process. WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers. PLEASE READ OUR PRIVACY NOTICE (HTTPS://WWW.WPP.COM/EN/CAREERS/WPP-PRIVACY-POLICY-FOR-RECRUITMENT) FOR MORE INFORMATION ON HOW WE PROCESS THE INFORMATION YOU PROVIDE.

WPP

WPP is the trusted growth partner for the world’s leading brands.  We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.    We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.   Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.    For more information, visit WPP.com.   Why we're hiring: The Technical Security Governance Lead is responsible for leading one or more technical security governance domains within Digital Security & Risk Management (DSRM). The role defines enforceable security guardrails and minimum baselines, monitors security posture and exposure, and provides independent oversight and challenge to Enterprise Technology (ET), DT&S engineering teams, and business-managed technology owners. This role focuses on risk, exposure, and control effectiveness—ensuring that technical security risks are consistently identified, assessed, escalated, and reported—without designing, building, configuring, or operating technology platforms. What you'll be doing: Technical Security Governance * Define and maintain technical governance guardrails, minimum baselines, and posture expectations for assigned domains. * Translate enterprise policies, standards, and risk appetite into clear and actionable technical expectations for execution teams. * Define exception criteria, escalation thresholds, and evidence requirements to ensure governance is auditable and defensible. * Provide independent challenge to remediation plans and risk acceptances where residual risk remains unacceptable. Compliance Monitoring * Support audit readiness by ensuring evidence requirements are defined, traceable, and consistently produced by execution owners. * Contribute technical governance input to ISO/SOC and internal assurance activities, including control operation validation where required. * Identify recurring compliance gaps and drive corrective actions through agreed remediation plans and escalation routes. Collaboration and Stakeholder Engagement * Partner with Enterprise Technology, DT&S engineering, and business-managed technology owners to embed governance expectations into delivery workflows. * Work closely with Risk Management, Client Assurance & Vendor Risk, and BISOs to ensure consistent risk visibility and business context. * Communicate expectations clearly and pragmatically, enabling delivery teams to move quickly within defined boundaries. CONTINUOUS IMPROVEMENT * Identify opportunities to improve governance processes, automation, and reporting to reduce friction and improve risk outcomes. * Stay informed on emerging threats and technical risk trends and incorporate relevant changes into governance expectations. * Drive maturity improvements across domains through measurable targets and iterative uplift plans. Domain Related Responsibilities - Identity * Define identity guardrails including authentication strength, privileged access controls, and identity-based risk thresholds. * Monitor identity posture signals (e.g., MFA coverage, privileged access hygiene, risky access paths) and escalate systemic weaknesses. * Ensure identity governance is treated as a primary attack-vector control domain across cloud, endpoint, and product environments. What you'll need: Essential * Fluent English – reading, writing and conversation skills. * Demonstrable experience in technical security governance, security assurance, or risk-based security oversight in a global environment * Strong understanding of cybersecurity policies, standards, and frameworks (e.g., ISO 27001, NIST CSF). * Strong understanding of cloud security, vulnerability management, identity risk, and modern attack paths and exposure management. * Experience working with global engineering and operations teams * Excellent analytical, problem-solving, and critical thinking skills. * Strong communication and interpersonal skills, with the ability to collaborate effectively across teams. * Ability to communicate risk and technical posture clearly to senior stakeholders and non-technical audiences. Nice-to-Have * Certifications such as CISSP, Azure, AWS, GCP or other related to the domain. * Familiarity with posture and detection tooling (e.g., CNAPP/CSPM, EDR, vulnerability scanning, identity telemetry) and evidence management approaches. * Working knowledge of agile methodologies. * Experience in multinational, multicultural and matrixed companies. * Bachelor's degree in Information Security, Computer Science or a related field Key Behaviour's & Competencies * Experience operating in decentralised or federated organisations — holding companies, media groups, professional services firms, or global technology businesses — where governance relies on influence rather than control. * Demonstrated ability to build governance programmes from the ground up, including posture measurement frameworks, KPI/KRI design, and executive risk reporting. * Broad technical security knowledge across multiple domains — enough to lead a specialist team, provide credible challenge, and recognise when you are being given an incomplete picture. * Strong executive communication skills — able to translate complex risk and posture data into clear, honest narratives for senior and non-technical audiences. * Experience governing across multiple regions and regulatory environments, with familiarity with GDPR and other major data protection frameworks. * Familiarity with client data obligations and the reputational and commercial stakes that come with them. Applicants are asked to submit their application in English.   Who you are: You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working. You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected. You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.   What we'll give you: Passionate, inspired people – We aim to create a culture in which people can do extraordinary work. Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry. Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge? #LI-Hybrid  We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process. WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers. PLEASE READ OUR PRIVACY NOTICE (HTTPS://WWW.WPP.COM/EN/CAREERS/WPP-PRIVACY-POLICY-FOR-RECRUITMENT) FOR MORE INFORMATION ON HOW WE PROCESS THE INFORMATION YOU PROVIDE.

Truecaller

Join Truecaller – The place where innovation meets impact! Truecaller's mission is to build trust in communication by making it safer, smarter, and more efficient. Born in Sweden, trusted by the world, and here’s why we stand out: * We are trusted by over 450 million active users every month across 190+ countries * We identify over 15 billion calls daily, helping users avoid spam and scams * We are powered by a team of 450+ employees from 45+ nationalities We always look for people who take initiative, own their work, and keep raising the bar. An entrepreneurial mindset matters here, especially when it turns bold ideas into real actions. We stay collaborative and focused, always searching for smarter paths forward. If you want to make an impact and grow with a team that inspires millions, you’ll fit right in. As a Senior IT-Operations Specialist, you will balance a mix of both technical support and system administration, ensuring the smooth operation of both end-user devices and network infrastructure. You will be responsible for troubleshooting hardware, software, and network issues across a multi-operating system environment, including Microsoft Windows, macOS, and Linux (a small minority). Additionally, you will play a key role in onboarding new employees, provisioning system accounts, maintaining IT inventory, and managing vendor relationships, all while ensuring compliance with ISO standards. What you’ll do:  * End-User Support – provide IT support for employees..  * New Employee Onboarding – set up and configure laptops, user accounts, and system access for new hires, ensuring a smooth onboarding experience. * Network & System Administration – configure and troubleshoot routers, switches, firewalls, and wireless access points. * User Account & Access Management – provision and deactivate system accounts, email accounts, and application access, ensuring ISO compliance * Hardware & Software Inventory Management – maintain an up-to-date inventory of IT assets, including laptops, peripherals, and software licenses * Software & License Management – purchase, renew, and track software licenses and IT assets to ensure compliance and availability * Vendor & Procurement Management – coordinate with vendors for hardware/software purchases, IT services, and contract renewals * System Security & Compliance – ensure IT operations align with ISO certification requirements, access control policies, security best practices, and IT governance * Documentation & Process Improvement – maintain IT documentation, update asset records, and contribute to process enhancements to meet compliance and audit requirements What you bring in:  * Strong Communication & Customer Service Skills – ability to explain technical concepts to non-technical users and provide excellent support * IT Support & Troubleshooting Expertise – proven ability to provide IT support in a multi-OS environment (Windows, macOS, Linux) with a strong understanding of hardware, software, and peripheral troubleshooting * Systems Administration Knowledge – hands-on experience managing user accounts, system access, and authentication protocols (Active Directory, Microsoft 365, Google Workspace, or similar) * Networking Knowledge & Administration – understanding of network fundamentals, including LAN management, VLAN configuration, switch setup, and WiFi network troubleshooting * Network Monitoring & Troubleshooting – ability to monitor network performance, diagnose LAN issues, and resolve connectivity problems It would be great if you also have: * Basic knowledge of GCP - be able to conduct access reviews, provisioning of access and similar administrative tasks.  * Firewall & Security Awareness – familiarity with pfSense or similar firewall solutions for managing network security and traffic rules * Virtualization & Infrastructure – understanding of virtual machines (VMs) and experience with Xen or similar virtualization platform What we offer:  We support growth through learning resources, leadership programs, mentoring, and real hands-on work. People can move between teams and projects to build new skills and keep things interesting. We offer clear internal mobility and a transparent path for progression, with leaders who stay involved and provide guidance throughout the year. In addition, you will benefit from: * A comprehensive compensation package:  Learning and development allowance, voluntary provident fund (VPF) and/or national pension scheme (NPS) tax saving option provided, creche allowance * Modern tools to do your best work: Choose your preferred computer and phone within our budget, so you can work comfortably and efficiently. * A people-focused office culture: We value in-person collaboration and follow an office-first model, with some flexibility. Our offices offer a vibrant environment with opportunities to learn, connect, and recharge, from breakfast, lunch and quiet spaces to team activities such as movie nights, tech meetups, and cultural events. There's something for everyone. * Truecaller’s “Lab Days” offer a space for imagination: 5 days each quarter, where everyone steps away from their normal tasks to explore new, bold ideas and build things they’ve always wanted to. It’s a space where curiosity leads the way, and prototypes take shape. Some concepts even make it into production, and a few have grown into real features used by millions today. Lab Days allow you to be creative, learn fast, and help shape Truecaller's future. Come as you are: Truecaller is committed to building a diverse and inclusive team. We believe that a wide range of backgrounds, perspectives, and experiences strengthens our products and our culture. No matter where you're from, what language you speak, or how you identify,  we value what makes you unique and would love to get to know you.  Sounds like a great opportunity? We will fill the position as soon as we find the right candidate, so please send your application as soon as possible. As part of the recruitment process, we will conduct a background check. We only accept applications in English.