Cyber Threat & Vulnerability Strategist

Thames Water Utilities Limited; Reading; Hybrid; GBP 39,000 - 65,000; Full time

Benefits offered by this job

Competitive salary

Annual leave 26-30 days

Performance pay

Pension scheme

Health & wellbeing benefits

Job summary

Thames Water Utilities Limited is recruiting a Cyber Threat & Vulnerability Analyst to protect critical water services. You’ll identify, assess, and reduce cyber risk across a large technology estate, prioritising remediation and guiding technical teams.

The role blends hands-on vulnerability management with collaboration across technical and business units. Based in Reading with hybrid working, you’ll support threat assessments, develop dashboards, and align with standards such as GDPR, PCI

Qualifications

• Experience supporting vulnerability management, patching, or cyber risk reduction in a complex environment.
• Understanding of cyber security concepts, including vulnerability management and threat assessment approaches.
• Ability to work with technical teams to support remediation of security issues.
• Experience with security tooling such as vulnerability scanners or similar technologies.
• Ability to communicate technical issues clearly to both technical and non-technical audiences.
• Awareness of how security risks are managed across different technology environments (cloud, servers, end-user devices, operational systems).
• Relevant cyber security qualification or industry certification such as CISSP, CISM, or CCSP.

Responsibilities

• Support end-to-end vulnerability management across IT and OT environments.
• Help shape and improve threat and vulnerability management processes, frameworks, and ways of working.
• Work with technical and business teams to prioritise and remediate vulnerabilities based on risk.
• Investigate new vulnerabilities and recommend clear, practical mitigation actions.
• Support integration of vulnerability scanning tools into existing systems and processes.
• Build and maintain dashboards that show cyber risk, trends, and remediation progress.
• Contribute to threat assessments and support proactive threat hunting activities.
• Help ensure alignment with GDPR, PCI DSS, NIS, and ISO 27001.

Skills

Vulnerability mgmt

Cyber risk reduction

Threat assessment

Security tooling

Cross-functional work

Communication skills

Security standards

Education

CISSP

CISM

CCSP

Tools

Vulnerability scanners

SIEM

Threat modeling

Job description

Thames Water Utilities Limited is recruiting a Cyber Threat & Vulnerability Analyst to protect critical water services. You’ll identify, assess, and reduce cyber risk across a large technology estate, prioritising remediation and guiding technical teams.

The role blends hands-on vulnerability management with collaboration across technical and business units. Based in Reading with hybrid working, you’ll support threat assessments, develop dashboards, and align with standards such as GDPR, PCI