WPP
Head of Security Automation & Process Engineering
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About WPP
WPP is a British multinational communications and advertising holding company based in London. Originally founded in 1971 as Wire and Plastic Products Ltd., the company transitioned to a marketing services group in the mid-1980s under the leadership of Sir Martin Sorrell. Today, WPP is recognized as a leading provider of communications services, employing around 400 central staff across major cities like London, New York, Shanghai, and Singapore. WPP offers a wide range of services, including advertising, media investment management, data investment management, public relations, brand consulting, and healthcare communications. The company has made significant strides in digital marketing and eCommerce, and it operates various subsidiaries, such as The Kantar Group, which focuses on research. WPP has received numerous accolades for its effectiveness and creativity in the industry, including being named Holding Company of the Year at Cannes Lions for seven consecutive years through 2017.
Security at WPP
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Stated AppSec Mission: "Security is integral to the design and operation of WPP Open"– WPP Trust Center (https://trust.wpp.com/). "We combine WPP's decades of experience serving enterprise clients with cutting-edge technology and strategic partnerships"– WPP Trust Center (https://trust.wpp.com/).
- Risk Philosophy: "we leverage threat intelligence, vulnerability scanning, penetration testing, internal reviews, and external audits"– WPP Trust Center (https://trust.wpp.com/).
- Stated Pain Points or Goals (Verbatim): "We aim to confirm receipt of your vulnerability report within 5 working days and triage your report within 10 working days."– Responsible Disclosure Policy (https://www.wpp.com/en/privacy-policy/responsible-disclosure-policy).
Security Team
Key Public-Facing Leaders: Peter Johnston, Chief Technology & Security Officer – https://www.linkedin.com/in/peter-johnston-80b54716 Key Quote: "Chief Technology & Security Officer"– LinkedIn profile (https://www.linkedin.com/in/peter-johnston-80b54716). Org Structure & Reporting Line: Information not publicly available. Team Size Estimate (as_of:): Information not publicly available. Active AppSec Job Postings (as_of:): Information not publicly available.
Key Initiatives
- Vulnerability Management Process: Intake: "If you believe you have found a security vulnerability, please submit your report to us using the following email address: enquiries@wpp.com"– Responsible Disclosure Policy (https://www.wpp.com/en/privacy-policy/responsible-disclosure-policy).
- Triage/Remediation: "We aim to confirm receipt of your vulnerability report within 5 working days and triage your report within 10 working days."– Responsible Disclosure Policy (https://www.wpp.com/en/privacy-policy/responsible-disclosure-policy).
- Secure SDLC Artifacts: "REPORTS Pentest Report"– WPP Trust Center (https://trust.wpp.com/).
- Security Champions Program: No Evidence Found.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.