Application & Development Security Lead

Why we're hiring:

We're looking for an Application & Development Security Lead to help shape and strengthen secure software development governance across one of the world's largest technology and creative ecosystems. Working within WPP's Digital Security & Risk Management team, you'll partner with engineering, product and platform teams to govern secure-by-design ways of working, improve software security governance, and provide oversight across modern development environments.

This role isn't about writing code day-to-day. Instead, you'll influence governance of how secure software is built, deployed and maintained across cloud-native platforms, APIs, AI-enabled applications and global engineering teams.

This is an opportunity to influence software security governance at global scale, helping shape how security supports innovation across one of the world's largest and most diverse technology environments. You'll work alongside talented security and engineering professionals while helping build secure, resilient products and platforms for the future.

What you'll be doing:

• Define and evolve secure software development standards, guardrails and governance practices.
• Partner with engineering and product teams to embed security into development lifecycles and delivery processes.
• Improve visibility and management of software security risks, including vulnerabilities, insecure coding trends and dependency risks.
• Strengthen governance of software supply chains, open-source dependencies and Software Bill of Materials (SBOM) practices.
• Support the development of secure CI/CD pipelines through controls such as code scanning, secrets detection and release governance.
• Help shape WPP's approach to securing AI-enabled applications, including areas such as prompt injection resilience, agent controls and data protection.
• Provide insight, reporting and challenge to ensure software security risks are understood, prioritised and effectively managed.
• Drive continuous improvements in software security maturity across the organisation.

What you'll need:

Experience in application security, software security, DevSecOps, software assurance or technical security governance.

Strong understanding of Secure SDLC, application security and modern software development practices.

Knowledge of CI/CD security, cloud-native environments and software supply chain risk.

Experience working closely with engineering teams to improve security outcomes.

Strong stakeholder management and communication skills, with the ability to influence technical and non-technical audiences.

A pragmatic approach to balancing security, risk and delivery.

Nice to Have:

• Experience with cloud platforms such as AWS, Azure or Google Cloud.
• Knowledge of SAST, DAST, SCA or software security tools.
• Experience with AI-enabled applications and emerging software security challenges.
• Security certifications such as CISSP, CSSLP or equivalent.

#LI-Hybrid

We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process.