Technology Risk And Controls Transformation Specialist at WPP plc — BranchFactor

Original posting

WPP is the trusted growth partner for the world’s leading brands.

We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.

We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.

Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.

For more information, visit WPP.com.

Why we're hiring:

This role is pivotal in supporting WPP’s large-scale ERP transformation programmes by embedding robust SDLC and transformation controls, driving compliance with our data and security requirements, and ensuring audit readiness for obligations such as SOX 404 IO. As a key member of the central assurance team, you will deliver control assurance and actively coach project teams, while also playing a strategic role in shaping the group’s compliance and controls posture to be more consistent, standardised, and repeatable.

You will support the Transformations Lead in delivering judgement led, risk based assurance across ERP migrations and SDLC controls. The role focuses on strengthening first line capability, uplifting evidence quality, and ensuring controls are executed and documented to audit standards. You will work closely with Financial Risk & Controls colleagues to ensure transformation controls are aligned and integrated with financial controls. While accountability for operating SDLC controls and producing complete, accurate evidence sits with project and delivery teams, this role ensures they are equipped to demonstrate control performance clearly and consistently, guiding them to meet their obligations and targeting assurance effort where it adds the most value.

What you'll be doing:

Govern and evaluate all phases of the SDLC, meticulously reviewing documentation, testing evidence, change artefacts, and data migration reconciliations from Initiation through Post-Go-Live.
Develop and manage comprehensive evidence checklists and trackers, ensuring continuous completeness, accuracy, and audit readiness for all control activities.
Mentor and empower project teams to proactively generate credible, high-quality, and self-sufficient evidence packages.
Provide critical insights to the Transformations Lead on control readiness, evidence integrity, and any impediments impacting assurance progression.
Collaborate strategically with Project Managers, the Financial Risk & Controls group, Business Owners, and Technical Leads to define, clarify, and embed stringent control expectations and evidence standards.
Generate insightful and concise reports that detail control posture, highlight emerging risks, and track remediation progress across complex transformation projects.
Proactively escalate critical issues and provide recommendations to the Transformations Lead regarding stakeholder challenges, recurring risk themes, and situations requiring senior intervention.
Champion and embed a culture of robust first-line accountability for control execution, documentation quality, and seamless evidence traceability.
Empower and guide teams to confidently articulate their own assurance rationale and take full ownership of their control walkthrough narratives.
Advise the Transformations Lead on first-line capability maturity, recurring documentation weaknesses, and any behavioural or ownership gaps that require attention.
Rigorously validate first-line assurance rationale, strategically focusing assurance efforts on the highest-risk areas to optimize impact and efficiency.
Exercise acute professional skepticism to judiciously determine the scope and necessity of testing, ensuring resources are directed effectively.
Highlight high-risk items and critical insights to the Transformations Lead, including the quality of rationale and instances warranting deeper challenge or a pause in assurance.
Facilitate and prepare first-line teams for internal and external audit engagements, ensuring they are equipped to present directly to auditors with clarity and confidence.
Collaborate effectively with auditors on scope, sampling, and documentation expectations, while steadfastly maintaining second-line independence and objectivity.
Inform the Transformations Lead on audit readiness posture, potential documentation misalignments, and any emerging risks that could impact audit outcomes.
Actively contribute to and influence the ongoing evolution of WPP’s compliance and controls strategy, proactively identifying opportunities to add significant value and enhance the group’s overall risk posture.

What you'll need:

Strong experience in IT audit, ITGC and SOX compliance (SOX 404)
Experience designing and delivering transformations programmes
Certifications such as CISA, CIA, CRISC advantageous.
Experience working with external auditors on SOX compliance within large-scale transformation programmes.
Prior exposure to data migration assurance and reconciliation processes.
Relevant experience and or professional certifications (e.g., CISA, CIA, CRISC) are advantageous.
Strong understanding of application control environments.
Solid grasp of SDLC principles and their application in complex transformation projects.
Demonstrated experience in IT audit, risk management, security, or compliance.
Exceptional documentation and communication skills, with the ability to translate technical risks into clear business language.
Proven ability to operate effectively in fast-paced, multi-stakeholder environments with competing priorities.
Comfortable working globally and flexibly across USA, APAC and EMEA time zones.

Who you are:

You're open_:_ We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.

You're optimistic_:_ We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.

You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:

Passionate, inspired people – We aim to create a culture in which people can do extraordinary work.

Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.

Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?

#LI-Hybrid

We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process.

WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers.

Please read our Privacy Notice (https://www.wpp.com/en/careers/wpp-privacy-policy-for-recruitment) for more information on how we process the information you provide.

Technology Risk And Controls Transformation Specialist

BranchFactor Summary

Please read our Privacy Notice (https://www.wpp.com/en/careers/wpp-privacy-policy-for-recruitment) for more information on how we process the information you provide.

More openings like this