Cyber Security Analyst (Identity)

Anglian Water Group; Lancaster; Hybrid; GBP 50,000; Full time

Job summary

A prominent utility company in the UK is seeking a Cyber Security Analyst to strengthen cyber resilience. You will manage identity and access controls, ensuring system security across IT and OT environments. This hybrid role offers flexibility, allowing for work from home, and requires strong technical knowledge and interpersonal skills. Responsibilities include assessing cyber security controls, supporting incident response, and enhancing security posture through collaboration and innovative practices. Join a team dedicated to making a difference in the water sector.

Benefits

Full private healthcare

26 days leave + Bank Holidays

Flexible working culture

Competitive pension scheme

Bonus Scheme

Qualifications

• Understanding of threat, risk assessment and risk management principles.
• Awareness of networking concepts such as TCP/IP.
• Ability to build effective relationships with technical and non-technical users.

Responsibilities

• Assess cyber security controls and produce reports.
• Identify and communicate cyber risks with mitigations.
• Support audits, penetration testing, and compliance.
• Produce dashboards and reports for leadership.
• Collaborate across IT, OT, and functions to align cyber activity.

Skills

Technical knowledge

Interpersonal skills

Problem-solving

Attention to detail

Risk assessment

Education

Degree or equivalent experience

CySA+, Security+, CISSP or CISM

Job description

Circa £50k, salary dependant on skills and experience

Permanent

Full-time, with flexibility for part-time

Hybrid role, working from Lincoln or Huntingdon

Anglian Water offers a flexible approach; this role provides you the flexibility to work from home and from an Anglian Water office. Your base location will be in either our Lincoln or Huntingdon office, depending on your location.

Strengthening cyber resilience to protect our people, customers, and environment.

This role will sit within our Identity team, focusing on safeguarding access and ensuring accounts have the right privileges at the right time. You will play a key role in managing identity and access controls, supporting authentication strategies, and driving improvements in identity governance. Working across IT and OT domains, you'll help deliver secure, user-friendly solutions that underpin trust and compliance across the organisation.

The Cyber Security Analyst is a pivotal member of the cyber security team, responsible for translating the organisation's cyber security strategy into effective protection across both IT and OT environments. Working across multiple domains-including Governance, Risk & Compliance (GRC), Security Operations (SecOps), Architecture, and Identity—the analyst will be deployed into a specific function based on organisational needs and emerging threats. Over time, analysts will have the opportunity to rotate between these domains to develop broad and well‑rounded cyber security expertise.

As a primary operational resource, the Cyber Security Analyst plays a key role in delivering day‑to‑day security activities, supporting incident response, assessing risks, and operating technical controls. The role also contributes to the secure design and implementation of new systems and services, ensuring the organisation maintains a strong security posture.

This is a diverse and hands‑on position, offering exposure to a wide range of security activities across both operational technology (OT) and information technology (IT) environments. Success in the role requires a strong technical foundation, analytical thinking, and a collaborative mindset, as the analyst will work closely with colleagues across IT, OT, and wider business functions.

Whether managing security controls, supporting audits and compliance reviews, or influencing secure architecture decisions, the Cyber Security Analyst will play a central role in strengthening the organisation's cyber resilience and maturity.

What will you be doing?

• Carry out assessments of cyber security controls across the business and with third‑party suppliers, producing clear reports and action plans.
• Identify and communicate cyber risks, recommending practical mitigations and tracking remediation progress.
• Support audits, penetration testing, vulnerability assessments, and overall compliance with regulatory requirements.
• Produce high‑quality dashboards and reports for senior leaders and governance forums.
• Act as a key point of contact with regulators such as DWI and NCSC.
• Promote a culture of continuous improvement by sharing insights and championing innovation across teams.
• Collaborate with colleagues across IT, OT, and wider business functions to align cyber activity with strategic objectives.
• Engage with industry peers to benchmark performance and bring in best practice.
• Contribute to the development, maintenance, and rollout of cyber security strategy, policies, standards, and guardrails.
• Work with technical and non‑technical teams to embed cyber requirements into new systems, services, and architecture decisions.
• Provide cyber expertise into projects, ensuring secure design, appropriate risk assessments, and testing.
• Support Security Operations by assisting investigations, raising incidents, coordinating with SOC teams, and improving operational security controls.
• Assist with incident response activities—including detection, response, and recovery—to minimise impact on critical services.
• Monitor security services and support continuous improvement to enhance overall security posture.

What does it take to be a Cyber Security Analyst?

We're looking for a highly capable and motivated Cyber Security professional who combines strong technical knowledge with excellent interpersonal skills. You'll bring:

• A degree (or equivalent experience) and formal cyber/IT/OT qualifications such as CySA+, Security+, CISSP or CISM.
• A solid understanding of threat, risk assessment and risk management principles.
• Strong knowledge in IT, OT, or cyber security, with a broad understanding across the wider cyber landscape.
• Awareness of core networking concepts such as TCP/IP.
• Natural curiosity and logical problem‑solving ability.
• High integrity, with the discretion required when handling sensitive information.
• The ability to build effective relationships with both highly technical colleagues and non‑technical users.
• A calm, composed approach under pressure.
• A self‑motivated, determined mindset with strong attention to detail.

As a valued employee, you'll be entitled to:

• Full private healthcare with no excess
• 26 days leave, rising with service + Bank Holidays, with the option to swap Christmas and Easter holidays for those celebrated by your religion
• A flexible working culture
• Competitive pension scheme – we double‑match your contributions up to 6%
• Bonus Scheme

Why apply?

Anglian Water is not your typical water company. What we do really matters. Water is the lifeblood of our world and we're proud of the difference we make. We put people at the heart of our business, and we truly love what we do! If you're passionate about what you do and would like to make a difference, then we'd love to hear from you.

Closing date: 4 January 2025

#loveeverydrop