doing:Defineandevolvesecuresoftwaredevelopmentstandards,guardrailsandgovernancepractices.Partnerwithengineeringandproductteamstoembedsecurityintodevelopmentlifecyclesanddeliveryprocesses.Improvevisibilityandmanagementofsoftwaresecurityrisks,includingvulnerabilities,insecurecodingtrendsanddependencyrisks.Strengthengovernanceofsoftwaresupplychains,open-sourcedependenciesandSoftwareBillofMaterials(SBOM)practices.SupportthedevelopmentofsecureCI/CDpipelinesthroughcontrolssuchascodescanning,secretsdetectionandreleasegovernance.HelpshapeWPP'sapproachtosecuringAI-enabledapplications,includingareassuchaspromptinjectionresilience,agentcontrolsanddataprotection.Provideinsight,reportingandchallengetoensuresoftwaresecurityrisksareunderstood,prioritisedandeffectivelymanaged.Drivecontinuousimprovementsinsoftwaresecuritymaturityacrosstheorganisation.What you'll need:Experienceinapplicationsecurity,softwaresecurity,DevSecOps,softwareassuranceortechnicalsecuritygovernance.StrongunderstandingofSecureSDLC,applicationsecurityandmodernsoftwaredevelopmentpractices.KnowledgeofCI/CDsecurity,cloud-nativeenvironmentsandsoftwaresupplychainrisk.Experienceworkingcloselywithengineeringteamstoimprovesecurityoutcomes.Strongstakeholdermanagementandcommunicationskills,withtheabilitytoinfluencetechnicalandnon-technicalaudiences.Apragmaticapproachtobalancingsecurity,riskanddelivery.Nice to Have:Experience with cloud platforms such as AWS, Azure or Google Cloud.Knowledge of SAST, DAST ...