Head Of Cyber Security

About the Company:

WPP is the trusted growth partner for the worlds leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.

We have been building the worlds most valuable brands for 50 years and have global reach across 100+ markets, with deep local expertise.Our people are the key to our success. Were committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.

For more information, visit WPP.com.

Why were hiring:

The Head of Automation & Process Engineering is responsible for establishing and leading the enterprise-wide automation and process excellence function within Operational Security. This role builds and scales an engineering-first automation capability that supports an Autonomic Security Operations (ASO) model—driving 10X improvements across SOC workflows, SOAR pipelines, incident response processes, and operational efficiency. The role oversees Security Automation Engineering and Process Engineering disciplines, ensuring seamless integration of automation, AI/ML, workflow optimisation, structured procedures, and end-to-end process governance across the security function.

What youll be doing:

Automation Strategy & Leadership

• · Define and own the automation vision and roadmap aligned to GCAT SOC10x principles.
• · Drive adoption of advanced automation capabilities across SIEM, SOAR, EDR, TIP, and cloud-native security tools.
• · Lead development and maintenance of SOAR playbooks, integrations, and automation workflows.
• · Identify automation opportunities to replace manual, high-effort processes across the security lifecycle.
• · Govern standards for automation coding, testing, documentation, and version control.

Process Engineering & Operating Model

• · Own the design, improvement, and standardisation of Operational Security processes and SOPs.
• · Build and maintain the process architecture for SOC, IR, Threat Hunting, and Detection Engineering.
• · Implement KPIs, maturity assessments, and continual service improvement cycles.
• · Ensure cross-team alignment and process integration across security disciplines.
• · Develop scalable, predictable, and measurable operating models for Operational Security.

Engineering Excellence & Technical Ownership

• · Oversee deep integration between Microsoft and Google security stacks, SOAR, SIEM, EDR, and TIP.
  
• · Ensure data flow and telemetry integration support automation pipelines.
• · Direct design reviews, QA, tooling optimisation, and technology evaluations.
• · Implement AI/ML-driven automation for enrichment, prioritisation, and response orchestration.

Cross-Functional Collaboration & Stakeholder Engagement

• · Act as automation and process engineering authority for Operational Security and Technology teams.
• · Collaborate with Detection Engineering, IR, Threat Hunting, and Threat Intelligence on automation requirements.
• · Partner with Ops Assurance, Legal, Privacy, vendors, and MSSPs to ensure aligned workflows.
• · Lead training programmes to uplift automation and process capability.

Talent Leadership & Organisational Development

• · Build and lead a high-performing automation and process engineering team.
• · Establish engineering standards for development, testing, and deployment.
• · Drive continuous learning, knowledge sharing, and capability uplift.

Strategic Alignment to GCAT SOC10x

• · 10X People: Build an engineering-centric automation and process team with strong knowledge sharing.
• · 10X Process: Transform security processes into automated, measurable, agile workflows.
• · 10X Technology: Leverage SOAR, AI/ML, and cloud-native automation to enhance detection and response.
• · 10X Visibility: Ensure comprehensive telemetry ingestion and process observability.
• · 10X Speed: Reduce MTTD/MTTR by eliminating manual tasks and enabling orchestration.
• · 10X TCO: Reduce cost and improve efficiency through automation and optimisation.
• · 10X Influence: Shape engineering culture and operational strategy across the organisation.

What youll need:

Technical Expertise

• · Deep experience with SOAR platforms and automation engineering.
• · Strong engineering background with SIEM, EDR, cloud-native security tooling.

• Looking to get Placed? Try our Placement Guarantee Plan

  Get Hired
  · Proficiency in Python, PowerShell, APIs, webhooks, and integration engineering.
• · Experience with AI/ML-enabled security automation and enrichment
• Process & Operating Model
• · Experience designing and governing operational workflows and SOPs.
• · Knowledge of CSI frameworks, maturity models, and process optimisation.
• · Experience with Lean, Six Sigma, or similar methodologies (desirable).

Leadership & Collaboration

• · Proven leadership of high-performing engineering teams.
• · Ability to influence stakeholders and communicate effectively.
• · Strong documentati
• documentation and organisational skills.

Certifications (Preferred)

• · GIAC (GCTI, GMON, GCIH, GCDA)
• · Python or automation certifications
• · Lean Six Sigma Green/Black Belt
• · GCP or Azure cloud certifications

Key Attributes

• · Engineering-first mindset with strong problem-solving skills.
• · Systems thinker with focus on scalability and resilience.
• · Excellent communicator able to translate technical complexity to outcomes.
• · Committed to operational excellence and continuous improvement.

Who you are:

Youre open:We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.

Please read our Privacy Notice (https://www.wpp.com/en/careers/wpp-privacy-policy-for-recruitment) for more information on how we process the information you provide.