Cyber Risk Insight & Assurance Lead

Southern Water; Durrington; Hybrid; GBP 50,000 - 61,000; Full time

Job summary

Southern Water is seeking a Cyber Risk & Assurance Analyst to join the Hybrid team at Durrington. You will assess cyber risk, strengthen controls and deliver clear risk insights across critical operations.

The role requires 5+ years in cyber security/risk or an advanced degree with 3+ years, with strong knowledge of NIST, ISO 27001/27005, SOC 2 and PCI. You’ll engage with Technology, Legal and the wider business to embed robust risk practices.

Qualifications

• Degree-level education or equivalent experience.
• Strong knowledge of cyber security and information security control best practice.
• Proven experience in cyber security, risk management or security assessment (5+ years, or advanced degree with 3+ years).
• In-depth understanding of key frameworks such as NIST (800-37, 800-30, 800-53), ISO 27001/27005, SOC 2, PCI or MITRE ATT&CK.
• Solid understanding of cloud models, application security, vulnerability and patch management.
• Experience in regulated and/or unionised environments.
• Excellent communication skills with the ability to simplify complex findings for senior management.
• Strong attention to detail and a proactive, positive, innovative mindset.

Responsibilities

• Maintain an up-to-date understanding of the cyber threat landscape and regulations (NIS1/NIS2, GDPR).
• Lead, plan and perform complex cyber risk assessments and test the design/effectiveness of controls.
• Produce high-quality risk assessment reports with actionable conclusions for risk-based decisions.
• Identify and deliver improvements across cyber domains and drive remediation actions.
• Collaborate with stakeholders across Technology, Legal, Internal Audit and the business to close control gaps.
• Build strong relationships to influence and strengthen cyber risk management practices.
• Drive process improvements across the Cyber Risk & Assurance function.

Skills

Cyber security

Risk management

Security assessment

Communication

Attention to detail

Cloud security

Vulnerability management

Regulatory compliance

Education

Degree-level education or equivalent experience

Job description

Southern Water is seeking a Cyber Risk & Assurance Analyst to join the Hybrid team at Durrington. You will assess cyber risk, strengthen controls and deliver clear risk insights across critical operations.

The role requires 5+ years in cyber security/risk or an advanced degree with 3+ years, with strong knowledge of NIST, ISO 27001/27005, SOC 2 and PCI. You’ll engage with Technology, Legal and the wider business to embed robust risk practices.