GRC & Purview Analyst — Data Governance

South West Water Limited; Exeter; On-site; GBP 32,000 - 39,000; Full time

Benefits offered by this job

Annual bonus

Pension

Hybrid working

Annual leave

Employee discounts

Wellbeing support

Job summary

South West Water Limited in Exeter seeks a Cyber Security GRC Analyst to strengthen governance, risk and compliance across the organisation. You will administer Microsoft Purview, implement data classification and oversee ISO 27001 and related frameworks.

The role requires hands-on Purview experience, knowledge of Microsoft 365 security, and the ability to translate complex requirements into practical controls. Permanent role with a competitive salary and benefits.

Qualifications

• Proven experience administering Microsoft Purview and Microsoft 365 security.
• Knowledge of DLP, Information Protection and Sensitivity Labels.
• Experience supporting data governance and compliance in Microsoft 365.
• Understanding of cyber security risk management and governance frameworks.
• Knowledge of ISO 27001, NIS Regulations and Cyber Essentials.
• Experience producing reports and managing stakeholders during audits.
• Strong communication skills and ability to influence across teams.

Responsibilities

• Administer, maintain and improve Microsoft Purview capabilities.
• Support data classification and labelling adoption across the organisation.
• Monitor security/compliance alerts, investigate findings and coordinate remediation.
• Develop and maintain security policies, controls and standards.
• Produce management reporting, dashboards and compliance metrics.
• Plan and document ISO 27001 internal audits.
• Support third-party risk management and supplier security activities.
• Help maintain compliance with ISO 27001, NIS Regulations and Cyber Essentials.
• Support security awareness initiatives and promote a security culture.
• Assist in security incident investigations and remediation activities.
• Collaborate with stakeholders to improve information governance and data ownership.

Skills

Purview admin

Microsoft 365 security

DLP

Information protection

Sensitivity labels

Insider risk

eDiscovery

Compliance Manager

ISO 27001

NIS Regulations

Cyber Essentials

Stakeholder management

Communication skills

Education

Degree level or equivalent experience

GCSEs including Maths and English

Job description

South West Water Limited in Exeter seeks a Cyber Security GRC Analyst to strengthen governance, risk and compliance across the organisation. You will administer Microsoft Purview, implement data classification and oversee ISO 27001 and related frameworks.

The role requires hands-on Purview experience, knowledge of Microsoft 365 security, and the ability to translate complex requirements into practical controls. Permanent role with a competitive salary and benefits.