Technology Risk & Controls Specialist

Why we're hiring:

This role is pivotal in supporting WPP’s large-scale ERP transformation programmes by embedding robust SDLC and transformation controls, driving compliance with our data and security requirements, and ensuring audit readiness for obligations such as SOX 404 IO. As a key member of the central assurance team, you will deliver control assurance and actively coach project teams, while also playing a strategic role in shaping the group’s compliance and controls posture to be more consistent, standardised, and repeatable.

You will support the Transformations Lead in delivering judgement led, risk based assurance across ERP migrations and SDLC controls. The role focuses on strengthening first line capability, uplifting evidence quality, and ensuring controls are executed and documented to audit standards. You will work closely with Financial Risk & Controls colleagues to ensure transformation controls are aligned and integrated with financial controls. While accountability for operating SDLC controls and producing complete, accurate evidence sits with project and delivery teams, this role ensures they are equipped to demonstrate control performance clearly and consistently, guiding them to meet their obligations and targeting assurance effort where it adds the most value.

What you'll be doing:

As a pivotal member of our team, you will drive robust control frameworks and foster a culture of accountability across our transformation initiatives. Your key accountabilities will include:

SDLC & Transformation Controls Governance:

• Govern and evaluate all phases of the SDLC, meticulously reviewing documentation, testing evidence, change artefacts, and data migration reconciliations from Initiation through Post-Go-Live.
• Develop and manage comprehensive evidence checklists and trackers, ensuring continuous completeness, accuracy, and audit readiness for all control activities.
• Mentor and empower project teams to proactively generate credible, high-quality, and self-sufficient evidence packages.
• Provide critical insights to the Transformations Lead on control readiness, evidence integrity, and any impediments impacting assurance progression.

Strategic Stakeholder Engagement & Reporting:

• Collaborate strategically with Project Managers, the Financial Risk & Controls group, Business Owners, and Technical Leads to define, clarify, and embed stringent control expectations and evidence standards.
• Generate insightful and concise reports that detail control posture, highlight emerging risks, and track remediation progress across complex transformation projects.
• Proactively escalate critical issues and provide recommendations to the Transformations Lead regarding stakeholder challenges, recurring risk themes, and situations requiring senior intervention.

Championing First-Line Ownership & Accountability:

• Champion and embed a culture of robust first-line accountability for control execution, documentation quality, and seamless evidence traceability.
• Empower and guide teams to confidently articulate their own assurance rationale and take full ownership of their control walkthrough narratives.
• Advise the Transformations Lead on first-line capability maturity, recurring documentation weaknesses, and any behavioural or ownership gaps that require attention.

Judgement-Led, Risk-Based Assurance:

• Rigorously validate first-line assurance rationale, strategically focusing assurance efforts on the highest-risk areas to optimize impact and efficiency.
• Exercise acute professional skepticism to judiciously determine the scope and necessity of testing, ensuring resources are directed effectively.
• Highlight high-risk items and critical insights to the Transformations Lead, including the quality of rationale and instances warranting deeper challenge or a pause in assurance.

Auditor Engagement & Assurance Preparedness:

• Facilitate and prepare first-line teams for internal and external audit engagements, ensuring they are equipped to present directly to auditors with clarity and confidence.
• Collaborate effectively with auditors on scope, sampling, and documentation expectations, while steadfastly maintaining second-line independence and objectivity.
• Inform the Transformations Lead on audit readiness posture, potential documentation misalignments, and any emerging risks that could impact audit outcomes.

Strategic Contribution & Continuous Improvement:

• Actively contribute to and influence the ongoing evolution of WPP’s compliance and controls strategy, proactively identifying opportunities to add significant value and enhance the group’s overall risk posture.

What you'll need:

Desirable

• Experience working with external auditors on SOX compliance within large-scale transformation programmes.
• Prior exposure to data migration assurance and reconciliation processes.
• Relevant experience and or professional certifications (e.g., CISA, CIA, CRISC) are advantageous

Essential

• Strong understanding of application control environments.
• Solid grasp of SDLC principles and their application in complex transformation projects.
• Demonstrated experience in IT audit, risk management, security, or compliance.
• Exceptional documentation and communication skills, with the ability to translate technical risks into clear
• business language.
• Proven ability to operate effectively in fast-paced, multi-stakeholder environments with competing priorities.
• Comfortable working globally and flexibly across USA, APAC and EMEA time zones.

 

Who you are:

You're open: we are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.

You're optimistic: we approach all that we do with confidence: to try the new and to seek the unexpected.

You're extraordinary: We are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:

Passionate, inspired people – we champion a culture of people that do extraordinary work

Scale and opportunity – we offer the opportunity to create, influence and deliver projects at a scale that is unparalleled in the industry.

Challenging and stimulating work – unique work and the opportunity to join a group of creative problem solvers.