ISP programming W25Q32 SPI flash memory chip
First thing: WP and HOLD should be soft-tied each with a pull-up, as the part also uses these pins as DQ in 4-bit mode. Never hard-tie them.

Second thing: When programming in-system you will need to provide a way to make sure the host doesn't interfere with the SPI pins. Unfortunately, if you just have the host powered off, the host SoC I/O pins will pull down these pins due to their protection diodes. Provide a way to high-Z these pins, by holding reset or some other way, such as a transmission gate, jumper block, etc.

Third thing: You have another option to connect the programmer: a clip directly onto the chip (SOIC clip.) Then you don't need a header.