Cyber Security GRC Analyst

South West Water Limited; Exeter; On-site; GBP 32,000 - 39,000; Full time

Benefits offered by this job

Annual bonus

Pension

Hybrid working

Annual leave

Employee discounts

Wellbeing support

Job summary

South West Water Limited in Exeter seeks a Cyber Security GRC Analyst to strengthen governance, risk and compliance across the organisation. You will administer Microsoft Purview, implement data classification and oversee ISO 27001 and related frameworks.

The role requires hands-on Purview experience, knowledge of Microsoft 365 security, and the ability to translate complex requirements into practical controls. Permanent role with a competitive salary and benefits.

Qualifications

• Proven experience administering Microsoft Purview and Microsoft 365 security.
• Knowledge of DLP, Information Protection and Sensitivity Labels.
• Experience supporting data governance and compliance in Microsoft 365.
• Understanding of cyber security risk management and governance frameworks.
• Knowledge of ISO 27001, NIS Regulations and Cyber Essentials.
• Experience producing reports and managing stakeholders during audits.
• Strong communication skills and ability to influence across teams.

Responsibilities

• Administer, maintain and improve Microsoft Purview capabilities.
• Support data classification and labelling adoption across the organisation.
• Monitor security/compliance alerts, investigate findings and coordinate remediation.
• Develop and maintain security policies, controls and standards.
• Produce management reporting, dashboards and compliance metrics.
• Plan and document ISO 27001 internal audits.
• Support third-party risk management and supplier security activities.
• Help maintain compliance with ISO 27001, NIS Regulations and Cyber Essentials.
• Support security awareness initiatives and promote a security culture.
• Assist in security incident investigations and remediation activities.
• Collaborate with stakeholders to improve information governance and data ownership.

Skills

Purview admin

Microsoft 365 security

DLP

Information protection

Sensitivity labels

Insider risk

eDiscovery

Compliance Manager

ISO 27001

NIS Regulations

Cyber Essentials

Stakeholder management

Communication skills

Education

Degree level or equivalent experience

GCSEs including Maths and English

Job description

Powered by Water, Driven by Purpose

South West Water keeps the South West flowing with safe, reliable drinking water and wastewater services across some of the UK’s most stunning landscapes.

We’re proud to be part of Pennon Group, a leader in the UK water sector, working towards a greener future. Our goals? As well as lowering our carbon footprint, we’re working with partners to plant 300,000 trees, restore peatlands and supporting farmers and landowners to improve water quality and wildlife.

Whether you’re starting out or seeking a new challenge, our scale and ambition create opportunities for you to shape your own career.

Ready to make a splash? Join our team today.

Cyber Security GRC Analyst

Location: Exeter Head Office, with an on-site presence required five days per week.

Salary: £32,000 - £39,000 per annum + annual bonus + excellent benefits

Contract: Permanent

Help protect critical services through effective cyber security governance

Are you passionate about cyber security, data governance and compliance? Do you enjoy translating complex security requirements into practical controls that make a real difference?

We're looking for an experienced Cyber Security GRC Analyst to join our growing Cyber Security team. In this role, you'll play a key part in strengthening our cyber security posture through governance, risk management and compliance activities, while helping to ensure our information assets remain protected.

A significant focus of the role will be the administration and continual improvement of Microsoft Purview, ensuring effective data protection, information governance, data classification and compliance capabilities are embedded across the organisation.

Working closely with stakeholders across IT, Legal, Audit, Procurement and the wider business, you'll help shape security practices, drive compliance initiatives and support a positive security culture.

As Our Cyber Security GRC Analyst, You Will

• Administer, maintain and continuously improve Microsoft Purview capabilities.
• Support the implementation and adoption of data classification and sensitivity labelling.
• Monitor security and compliance alerts, investigate findings and coordinate remediation activities.
• Develop and maintain security policies, controls and standards.
• Produce management reporting, dashboards and compliance metrics.
• Plan, conduct and document internal ISO 27001 audits.
• Support third-party risk management and supplier security assurance activities.
• Help maintain compliance with frameworks and regulations such as ISO 27001, NIS Regulations and Cyber Essentials.
• Support information security awareness initiatives and promote a strong security culture.
• Assist in security incident investigations and remediation activities.
• Work with business stakeholders to improve information governance practices and data ownership accountability.

What we're looking for

• Proven experience administering and optimising Microsoft Purview and Microsoft 365 security and compliance solutions.
• Strong working knowledge of Microsoft Purview capabilities, including DLP, Information Protection, Sensitivity Labels, Insider Risk Management, eDiscovery and Compliance Manager.
• Demonstrable experience supporting data governance, information protection and compliance activities within a Microsoft 365 environment.
• An understanding of cyber security risk management, governance and control frameworks.
• Knowledge of information security standards such as ISO 27001, NIS Regulations and Cyber Essentials.
• Experience producing reports, managing stakeholders and supporting audit activities.
• Strong communication skills with the ability to influence and build relationships across diverse teams.

Essential Requirements

• 5 GCSEs (or equivalent), including Maths and English.
• Educated to degree level or able to demonstrate equivalent professional experience.
• Hands-on experience of Microsoft Purview administration and optimisation.

Desirable

• Experience within information security, governance, risk or compliance functions.
• Knowledge of recognised security frameworks such as ISO 27001, NIST or Cyber Essentials.
• Ability to successfully obtain UK Government Security Clearance (SC).

Why join us?

This is an exciting opportunity to play a key role in protecting critical services, information assets and customer data. You'll work with modern Microsoft security and compliance technologies, support important governance and compliance initiatives, and help drive continual improvement in cyber security practices across the organisation.

If you're an experienced cyber security professional looking to apply your Microsoft Purview expertise within a governance, risk and compliance environment, we'd love to hear from you.

What's in it for You?

• Competitive Salary – Reflective of your skills, experience and expertise.
• Annual Bonus Scheme – Rewarding both individual and business performance.
• Generous Pension Scheme – Helping you save for the future.
• Flexible & Hybrid Working – Supporting a healthy work-life balance wherever possible.
• Generous Annual Leave Allowance – Giving you time to recharge and spend time doing what matters most.
• Holiday Buy & Sell Scheme – Providing additional flexibility to tailor your annual leave to suit your lifestyle.
• Employee Assistance Programme – Providing confidential wellbeing support whenever you need it.
• Exclusive Employee Discounts – Access to a range of offers, discounts and benefits.
• A Collaborative Team Environment – Work alongside experienced professionals who are committed to supporting your success.

Closing Date: 30th October 2026

We may close this vacancy early if we receive a high volume of applications. We encourage you to apply as soon as possible.

Please note that the successful candidate will be subject to a mandatory DBS check as part of the onboarding process.

Be yourself, we like it that way.

Together, we will build a culture of belonging, where inclusion is instinctive. Diversity is our strength and a reflection of our communities. We care, we value everyone, we celebrate uniqueness.

Our core values, which are essential to our success, are:

• Be Rock Solid - Build trust and be trusted. Be the one we all look to and can depend on.
• Be You - We want you to bring your best everyday. Be yourself and make your mark in your individual way.
• Be the Future - Embrace change. Drive Progress. Own the challenge.