Technology Risk Senior Analyst

Overview

Support the build-out and day-to-day operation of WPP's Enterprise Technology Risk capability, reporting to the Technology Risk Lead, to identify, assess, document and monitor technology risks and issues and drive practical treatment and remediation.

What you'll do

• Support the operation and continuous improvement of the Enterprise Technology risk management framework, standards and ways of working.
• Coordinate and document technology risk assessments, issue reviews, control observations and risk treatment plans across Enterprise Technology.
• Maintain accurate risk and issue records, ensuring owners, actions, due dates, evidence and status updates are complete and current.
• Analyse risk data, audit findings, incidents, resilience outputs and control themes to identify trends, concentrations and emerging areas of exposure.
• Prepare high-quality reporting, dashboards and briefing material for key stakeholders and relevant technology governance forums.
• Work with Enterprise Technology, Enterprise Security, Digital Security & Risk, DTS, Assurance and Operational teams to support remediation planning and monitor progress against agreed actions.
• Provide constructive challenge on risk descriptions, treatment plans, closure evidence and risk acceptance proposals.
• Support risk workshops, scenario discussions, governance meetings and stakeholder reviews, capturing clear outcomes and actions.
• Identify opportunities to streamline risk management using workflow tools, automation, analytics and responsible AI-enabled approaches.
• Act as a senior individual contributor by coaching less experienced colleagues informally and promoting high standards of documentation, analysis and follow-through.

What you'll need

• Experience in Technology Risk inc. (Cyber) Security, Technology Governance & Controls Assurance.
• Good understanding of technology environments such as security, cloud, infrastructure, identity, networks, end-user technology, service management, resilience and ITGCs.
• Ability to analyse risk and control information and convert it into clear, actionable insight.
• Experience maintaining risk registers, issue logs, remediation plans, governance packs or assurance documentation.
• Strong written communication skills with the ability to produce concise, accurate and professional risk narratives.
• Confident stakeholder engagement skills, including working with technical teams, control owners and governance stakeholders.
• Strong attention to detail, organisation and follow-through across multiple workstreams.
• Interest in using automation, analytics and agentic AI to reduce manual effort and improve risk insight.

Nice to have

• Experience with reporting, workflow, GRC or data visualisation tools; Power BI, ServiceNow IRM, Drata or equivalent exposure would be helpful.
• CRISC, CISA, foundational risk certifications, or equivalent professional experience are desirable.

Details

• Hybrid working, with teams in the office around four days a week.
• Location: Chennai, Tamil Nadu, India.