Governance Analyst

WPP · Sao Paulo, Brazil

  • Junior
  • Full-time
  • Posted 2026-11-10
  • Confirmed live on 12 November 2026

Apply at WPP

Job description

WPP is the trusted growth partner for the world’s leading brands.

We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.

We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.

Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.

For more information, visit WPP.com.

Role Purpose

The Governance & Assurance Analyst supports WPP's governance, certification, assurance, and digital risk management activities.

The role helps maintain governance documentation, support certification and audit readiness activities, coordinate evidence collection, and contribute

to client assurance requests and governance reporting.

Working closely with Strategy & Risk, Technical Security Governance, Assurance, Privacy, Legal, Enterprise Technology, and business stakeholders,

the Governance & Assurance Analyst helps ensure governance processes remain effective, documentation remains current, and evidence required

for certifications, audits, and client assurance activities is readily available.

A key focus of the role is supporting the day-to-day operation of WPP's Information Security Management System (ISMS), maintaining certification

readiness, and coordinating governance and assurance activities across the organisation.

Key Responsibilities

Governance & Policy Support

Maintain governance frameworks, policies, standards, procedures, and related documentation.

Support periodic reviews and updates of governance artefacts.

Maintain mappings between policies, standards, controls, and certification requirements.

Assist with governance forums, working groups, and documentation reviews.

Support the preparation of governance materials, meeting outputs, and action tracking.

Provide research and analysis to support governance activities and decision-making.

Digital Risk Governance Support

Support governance reporting activities related to digital risk management.

Assist with the collection and analysis of governance-related metrics and indicators.

Maintain governance dashboards, scorecards, and reporting materials.

Track governance actions and follow-up activities.

Support reviews of governance processes and documentation.

ISO 27001 & Certification Support

Support the operation of the Information Security Management System (ISMS).

Coordinate activities required to support ISO 27001 certification and surveillance audits.

Maintain certification-related records, registers, and supporting documentation.

Coordinate evidence collection and stakeholder engagement activities required for audits.

Track audit findings, corrective actions, and improvement activities through to closure.

Support management review preparation and governance reporting.

Help maintain ongoing audit and certification readiness.

Client Assurance Support

Coordinate responses to client security, governance, risk, and compliance due diligence requests.

Collaborate with relevant stakeholders to gather information required for assurance activities.

Maintain reusable assurance content, responses, and supporting evidence.

Track assurance requests and response status.

Support the continuous improvement of assurance documentation and response quality.

Evidence Management & Audit Readiness

Maintain repositories used to support governance, certification, audit, and assurance activities.

Coordinate evidence collection across relevant business functions.

Ensure evidence is current, appropriately classified, and available for authorised use.

Maintain evidence ownership information, review dates, and supporting metadata.

Identify missing, outdated, or incomplete evidence and coordinate remediation activities.

Support internal, external, certification, client, and regulatory reviews through effective evidence coordination.

Reporting & Operational Improvement

Support the development of governance dashboards, scorecards, metrics, and reporting packs.

Analyse governance and assurance data to identify trends and reporting insights.

Support the standardisation of governance documentation, evidence collection, and reporting practices.

Identify opportunities for process improvements and raise recommendations to management.

Contribute to the continuous improvement of governance operational processes and reporting effectiveness.

Skills & Experience Required

Must-Haves

Fluent English, written and verbal.

Bachelor's degree in Information Security, Risk Management, Audit, Complianc

Prepare for the interview

Nothing collected for this employer yet. The Blind 75 is what technical screens draw from; practice it here, with a coach, in Java or Python.

More at WPP

All open software jobs