Governance Analyst

The role

This role supports WPP's governance, certification, assurance and digital risk management work. The analyst helps keep governance documents current, gathers evidence for audits and certifications, and coordinates responses to client assurance requests.

What you will do

• Maintain governance frameworks, policies, standards, procedures and related documentation.
• Support the day-to-day operation of the Information Security Management System (ISMS).
• Coordinate activities to support ISO 27001 certification and surveillance audits.
• Track audit findings and corrective actions through to closure.
• Coordinate responses to client security, governance, risk and compliance due diligence requests.
• Maintain repositories and collect evidence for governance, certification, audit and assurance activities.
• Support governance dashboards, scorecards, metrics and reporting packs.
• Track governance actions and follow-up activities.
• Identify process improvements and raise recommendations to management.

Required qualifications

• Fluent English, written and verbal.
• Bachelor's degree in Information Security, Risk Management, Audit, Compliance, Business Administration or a related discipline, or equivalent relevant experience.
• 2-4 years of experience in governance, information security, compliance, audit, risk management, assurance or a related discipline.
• Experience supporting an ISO 27001-based management system, audit programme or certification activity.
• Understanding of governance frameworks, controls, audit principles and certification requirements.
• Experience supporting audits, assurance reviews or certification activities.
• Experience coordinating evidence collection and documentation activities.
• Strong reporting, documentation and organisational skills.
• Ability to work with technical and non-technical stakeholders.
• Strong communication and stakeholder coordination skills.
• Ability to manage multiple priorities in a global environment.

Nice to have

• ISO 27001 Foundation, Lead Implementer, Lead Auditor or similar qualification.
• CISA, CISM, CRISC, CISSP or equivalent certification.
• Exposure to frameworks such as SOC 2, GDPR, NIS2 or similar.
• Experience supporting client assurance or security questionnaire activities.
• Experience using GRC, audit, compliance or certification management platforms.
• Experience within a large multinational organisation.

About the company

WPP is a growth partner for major brands, combining media intelligence, creativity, production, enterprise solutions and strategic counsel. It operates in more than 100 markets.