# Risk Specialist at WPP

> Brazil · Unspecified · Other · open. Source: https://alderhq.app/jobs/greenhouse%3Awpp%3A8580426002 (read 2026-11-03).

## Facts (observed)

- Company: [WPP](https://alderhq.app/companies/wpp)
- Location text: São Paulo, Sao Paulo, Brazil; Brazil
- Where it can be done from (inferred): Brazil (evidence: "Location: São Paulo, Sao Paulo, Brazil; Brazil")
- Posted: 2026-06-11 (145 days ago)
- First seen by alder: 2026-11-03 · last verified: 2026-11-03
- Reposted: 0 times · edited: 0 times
- Apply on the employer's site: https://job-boards.greenhouse.io/wpp/jobs/8580426002

## Pay and sponsorship

- Posted pay: not posted

## Description (the employer's text)

WPP is the trusted growth partner for the world’s leading brands.

We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.

We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.

Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.

For more information, visit WPP.com.

Why we're hiring:

We are looking to hire an individual that will own the identification, assessment, documentation and monitoring of digital and information security risks across WPP, ensuring risks are clearly articulated, consistently assessed and effectively tracked.

What you'll be doing

Risk Assessment & Management

- Conduct enterprise and operational security risk assessments.
- Ensure risk statements, impact and likelihood justifications are clear and defensible.
- Maintain accurate and current risk records within approved GRC tooling.
Risk Management

- Conduct organisational-level, third-party or product risk assessments to identify technical, process and/or procedural vulnerabilities and recommend mitigation strategies.
- Support the implementation of WPP’s Digital Security risk management framework, ensuring alignment with organisational goals.
- Monitor and report on Key Risk Indicators (KRIs) to provide insights into WPP’s cybersecurity posture.
Risk Treatment & Monitoring

- Support risk owners in defining proportionate mitigation actions.
- Track remediation progress and reassess residual risk.
- Escalate material risk changes or overdue actions.
What you'll need:

Essential:

- Fluent English (reading, writing, and conversation).
- Bachelor’s degree in Information Security, Risk Management, or equivalent
- Experience in cybersecurity governance, GRC, or risk support roles.
- Strong understanding of cybersecurity policies, standards, and frameworks (e.g. ISO 27001, NIST CSF).
- Ability to work with governance, assurance, and technical teams to maintain clear and usable frameworks.
- Strong written communication skills, with high attention to accuracy and consistency.
- Foundational understanding of cloud computing models (IaaS, PaaS, SaaS) and associated security risks.
- Awareness of common cyber risk scenarios related to cloud platforms, SaaS environments, identity, and third-party integrations.
- Exposure to emerging technology risks, such as AI-enabled systems, automation, and digital transformation initiatives.
- Ability to assess risks across modern, distributed technology environments.
- Foundational understanding of DevSecOps principles and secure-by-design approaches within modern software development lifecycles.
- Ability to elevate the role to value-driven cyber risk management
Nice - to- have

- Certifications such as CISSP, CISM, or CRISC.
- Familiarity with GRC tools and risk management platforms.
- Working knowledge of agile methodologies.
- Experience in multinational, multicultural and matrixed companies.
Key Behaviours & Competencies

- Proactive Problem-Solving: Anticipates challenges in governance and compliance activities and develops effective solutions.
- Collaborative: Builds strong relationships across teams (e.g., Legal, Enterprise Technology) to ensure alignment and efficiency.
- Detail-Oriented: Ensures accuracy and consistency in governance documentation, role definitions, and standards.
- Adaptable: Thrives in a fast-paced environment and adjusts quickly to changing priorities or regulatory requirements.
- Ethical Integrity: Maintains high ethical standards, ensuring compliance with policies and safeguarding WPP’s reputation.
- Analytical Thinking: Demonstrates strong analytical skills to interpret complex data and identify actionable insights.

---
Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/greenhouse%3Awpp%3A8580426002 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.