Chief Information Security Officer (Chief Security Officer)

United Utilities; Warrington; Hybrid; GBP 150,000 - 190,000; Full time

Job summary

United Utilities is seeking a Senior Executive to lead its enterprise security strategy, covering cyber, information, OT and physical security. You will report to the Customer Service and Technology Director and influence Board-level decisions on risk and resilience.

The role requires partnering with regulators and industry bodies to shape security practices while guiding a large security function across IT, OT and physical environments.

Qualifications

• Significant experience leading enterprise security programs in a large organization.
• Proven ability to influence Boards and senior executives on security strategy.
• Strong governance, risk and compliance capabilities across IT/OT/physical security.

Responsibilities

• Define and deliver the enterprise-wide cyber, information and physical security strategy.
• Lead security governance, risk and compliance across the business.
• Oversee incident response planning and execution at the executive level.
• Build relationships with regulators, government agencies and industry bodies.
• Lead and develop high-performing security teams across governance and operations.

Skills

Executive leadership

Stakeholder management

Strategic thinking

Regulatory engagement

Education

Degree qualified or equivalent

Tools

CISSP, CISM, CRISC

Job description

Chief Information Security Officer (Chief Security Officer)

Job number UU06720 Country United Kingdom Region Cheshire West and Chester Location name Lingley Mere (UU), Lingley Green Avenue, Great Sankey, Warrington, WA5 3LP Posting End Date 02/11/2026 Band 2 Role Type Permanent Salary Competitive

Chief Information Security Officer (Chief Security Officer)

United Utilities

Safeguarding Critical National Infrastructure. Protecting Millions of Customers. Shaping the Future of Security.

United Utilities is one of the UK's leading providers of water and wastewater services, serving more than seven million people across the North West of England. As we continue to invest in the resilience, security and digital transformation of our business, we are seeking an exceptional Chief Information Security Officer (CISO) / Chief Security Officer (CSO) to provide strategic leadership across cyber, information, operational technology and physical security.

Reporting directly to the Customer Service and Technology Director, this Executive leadership role will be responsible for defining and delivering a holistic security strategy that protects one of the UK's most important critical national infrastructure organisations.

This is a rare opportunity to influence security at the highest levels of a FTSE-listed business, shaping board-level decision making, regulatory engagement and industry-wide security practices.

The Role

As Chief Security Officer, you will lead United Utilities' enterprise-wide security agenda, ensuring the confidentiality, integrity, resilience and availability of our information, technology, operational assets and physical infrastructure.

You will serve as the organisation's foremost authority on security risk, providing trusted advice to the Executive Team and Board, whilst building strong partnerships with regulators, government agencies, sector bodies and industry peers.

You will oversee both Information Technology (IT) and Operational Technology (OT) security, championing a security-first culture across the organisation and ensuring compliance with evolving regulatory and industry requirements, including Network and Information Systems (NIS) obligations and security assurance frameworks.

A highly visible and influential leader, you will act as United Utilities' senior representative on security matters, engaging externally with bodies such as the National Cyber Security Centre (NCSC), Drinking Water Inspectorate (DWI), Water UK and other key stakeholders.

Key Responsibilities

Strategic Leadership

• Define and deliver United Utilities' cyber, information and physical security strategy.


• Provide authoritative advice and challenge to Executive and Board stakeholders on emerging threats, risks and opportunities.


• Lead security governance, risk and compliance across the enterprise.


• Develop a culture where security is embedded into decision-making, operations and customer service delivery.


• Ensure the organisation remains resilient against evolving cyber and physical security threats.

Security Governance & Risk

• Lead enterprise-wide security risk management across IT, OT and physical environments.


• Oversee security policy, standards, assurance frameworks and compliance programmes.


• Ensure alignment with regulatory obligations, industry standards and best practice.


• Chair the Security Steering Group and drive a coordinated approach to risk mitigation across the business.


• Serve as the executive lead for cyber and security incident preparedness and response.


• Own and continuously develop United Utilities' Cyber Security Incident Response capability.


• Provide leadership and assurance during significant security events, engaging with regulators, government agencies and senior stakeholders as required.

External Leadership & Stakeholder Engagement

• Build and maintain strong relationships with regulators, industry bodies and government agencies.


• Represent United Utilities within industry working groups and sector forums.


• Protect and enhance the organisation's reputation through proactive engagement and thought leadership on security matters.


• Lead and develop high-performing teams across security governance, assurance and operational security functions.


• Foster an inclusive and performance-driven culture where colleagues are empowered to succeed.


• Build organisational capability through security awareness, education and engagement initiatives.

About You

We are looking for a proven executive security leader with the credibility, expertise and presence to operate effectively at Board level and within complex regulated environments.

You will bring:

• Significant experience leading enterprise cyber security programmes within a large, complex organisation.


• Deep expertise in information security, operational technology security and enterprise risk management.


• A strong track record of influencing Boards, Executive Teams and senior decision-makers.


• Experience engaging with regulators, government agencies and external assurance bodies.


• Demonstrable success developing and implementing security strategies that balance risk, resilience and business outcomes.


• Strong commercial acumen and experience managing budgets, suppliers and strategic partnerships.


• Outstanding stakeholder management, communication and influencing skills.


• The gravitas to challenge constructively, shape strategic thinking and drive organisational change.

Qualifications & Professional Credentials

• Degree qualified or equivalent professional experience.


• CISSP, CISM, CRISC or equivalent recognised security qualification preferred.


• Extensive experience operating within regulated, critical infrastructure or highly complex environments is desirable.

Why United Utilities?

At United Utilities, security is fundamental to protecting essential services that millions of people rely upon every day.

This role offers the opportunity to:

• Influence security strategy at Board and Executive level.


• Protect critical national infrastructure and essential public services.


• Lead engagement with regulators, government and industry bodies.


• Shape the future security posture of one of the UK's most important utility organisations.


• Build, inspire and develop high-performing security teams.


• Make a lasting impact on customers, communities and the environment.

As part of our recruitment process, candidates may be asked to complete conflict of interest declarations and, for certain senior roles, enhanced pre-employment due diligence checks.

United Utilities is committed to creating a diverse and inclusive workplace. We encourage applications from all backgrounds and communities.