WPP is the trusted growth partner for the world’s leading brands.

We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.

We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.

Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.

For more information, visit WPP.com.

Role Purpose

The Governance & Assurance Analyst supports WPP's governance, certification, assurance, and digital risk management activities.

The role helps maintain governance documentation, support certification and audit readiness activities, coordinate evidence collection, and contribute

to client assurance requests and governance reporting.

Working closely with Strategy & Risk, Technical Security Governance, Assurance, Privacy, Legal, Enterprise Technology, and business stakeholders,

the Governance & Assurance Analyst helps ensure governance processes remain effective, documentation remains current, and evidence required

for certifications, audits, and client assurance activities is readily available.

A key focus of the role is supporting the day-to-day operation of WPP's Information Security Management System (ISMS), maintaining certification

readiness, and coordinating governance and assurance activities across the organisation.

Key Responsibilities

Governance & Policy Support

Maintain governance frameworks, policies, standards, procedures, and related documentation.

Support periodic reviews and updates of governance artefacts.

Maintain mappings between policies, standards, controls, and certification requirements.

Assist with governance forums, working groups, and documentation reviews.

Support the preparation of governance materials, meeting outputs, and action tracking.

Provide research and analysis to support governance activities and decision-making.

Digital Risk Governance Support

Support governance reporting activities related to digital risk management.

Assist with the collection and analysis of governance-related metrics and indicators.

Maintain governance dashboards, scorecards, and reporting materials.

Track governance actions and follow-up activities.

Support reviews of governance processes and documentation.

ISO 27001 & Certification Support

Support the operation of the Information Security Management System (ISMS).

Coordinate activities required to support ISO 27001 certification and surveillance audits.

Maintain certification-related records, registers, and supporting documentation.

Coordinate evidence collection and stakeholder engagement activities required for audits.

Track audit findings, corrective actions, and improvement activities through to closure.

Support management review preparation and governance reporting.

Help maintain ongoing audit and certification readiness.

Client Assurance Support

Coordinate responses to client security, governance, risk, and compliance due diligence requests.

Collaborate with relevant stakeholders to gather information required for assurance activities.

Maintain reusable assurance content, responses, and supporting evidence.

Track assurance requests and response status.

Support the continuous improvement of assurance documentation and response quality.

Evidence Management & Audit Readiness

Maintain repositories used to support governance, certification, audit, and assurance activities.

Coordinate evidence collection across relevant business functions.

Ensure evidence is current, appropriately classified, and available for authorised use.

Maintain evidence ownership information, review dates, and supporting metadata.