Head of Security Incident Management

Head of Security Incident Management Overview

WPP is seeking a Head of Security Incident Management to lead and enhance its global Security Incident Management capabilities. This role is pivotal in providing strategic, operational, and technical leadership throughout the incident response lifecycle. Reporting to the Director of Operational Security, the successful candidate will oversee the Security Incident Management function, ensuring that security incidents are managed effectively and in compliance with WPP policies and regulatory obligations.

Key Responsibilities

• Lead and develop teams responsible for Security Incident Management.
• Establish strategic direction for incident response aligned with Operational Security objectives.
• Maintain accountability for managing critical and major security incidents.
• Act as the senior escalation authority for Severity 1 and Severity 2 incidents.
• Ensure effective governance and stakeholder engagement throughout the incident lifecycle.
• Provide executive-level updates during significant cybersecurity incidents.
• Define and manage the Security Incident Management strategy and roadmap.
• Develop a consistent incident response operating model across WPP.
• Establish incident response frameworks and methodologies.
• Promote intelligence-led response capabilities.
• Ensure compliance with regulatory and contractual obligations.
• Collaborate with security functions to enhance response capabilities.
• Drive automation in incident management processes.
• Sponsor innovations to improve operational quality and resilience.
• Coordinate responses during major cyber incidents and breaches.
• Engage with external partners as necessary.
• Oversee recovery efforts and organizational improvements post-incident.
• Manage Security Incident Management documentation and policies.
• Chair incident review forums and oversee improvement programs.
• Define and manage operational metrics and provide reports to leadership.
• Foster a high-performing culture within the Security Incident Management team.

Requirements

• Extensive experience in leading Security Incident Management functions.
• Proven experience in managing major cybersecurity incidents.
• Strong understanding of incident response methodologies and governance frameworks.
• Experience leading multidisciplinary cybersecurity teams.
• Deep technical knowledge of relevant security technologies.
• Experience in defining operational metrics and frameworks.
• Excellent communication skills.
• Demonstrated ability to build operational security capabilities.

Benefits

• A culture that encourages extraordinary work and creativity.
• Opportunities to influence and complete projects on an unparalleled scale.
• Challenging and stimulating work with a team of creative problem solvers.

This position operates in a hybrid working pattern, with teams expected to be in the office around four days a week. WPP is committed to fostering a culture of respect and inclusivity, ensuring equal opportunities for all employees.

Degree Requirement: Not Specified

Visa Sponsorship May be