> Markdown version of [/jobs/ext/4495878-technical-security-governance-lead-software-development-open](https://www.wearedevelopers.com/jobs/ext/4495878-technical-security-governance-lead-software-development-open). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Technical Security Governance Lead - Software Development (Open)

- **Company:** World Press Release Organisation
- **Location:** UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing, Continuous Integration, Open Source Technology, Systems Development Life Cycle, Software Engineering, Software Organization, Google Cloud, Software Security, Devsecops, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** November 2, 2026
- **Apply:** https://www.totaljobs.com/job/software-developer/world-press-release-organisation-job108268525

## About the Role

* Experience in application security, software security, DevSecOps, software assurance or technical security governance.
 * Strong understanding of Secure SDLC, application security and modern software development practices.
 * Knowledge of CI/CD security, cloud-native environments and software supply chain risk.
 * Experience working closely with engineering teams to improve security outcomes.
 * Strong stakeholder management and communication skills, with the ability to influence technical and non-technical audiences.
 * A pragmatic approach to balancing security, risk and delivery.

Nice to Have:

 * Experience with cloud platforms such as AWS, Azure or Google Cloud.
 * Knowledge of SAST, DAST, SCA or software security tools.
 * Experience with AI-enabled applications and emerging software security challenges.
 * Security certifications such as CISSP, CSSLP or equivalent.

## Description

* Define and evolve secure software development standards, guardrails and governance practices.
 * Partner with engineering and product teams to embed security into development lifecycles and delivery processes.
 * Improve visibility and management of software security risks, including vulnerabilities, insecure coding trends and dependency risks.
 * Strengthen governance of software supply chains, open-source dependencies and Software Bill of Materials (SBOM) practices.
 * Support the development of secure CI/CD pipelines through controls such as code scanning, secrets detection and release governance.
 * Help shape WPP's approach to securing AI-enabled applications, including areas such as prompt injection resilience, agent controls and data protection.
 * Provide insight, reporting and challenge to ensure software security risks are understood, prioritised and effectively managed.
 * Drive continuous improvements in software security maturity across the organisation.