Information Security Risk and Compliance Analyst

Severn Trent; Coventry; On-site; GBP 45,000 - 65,000; Full time

Benefits offered by this job

28 days holiday + bank holidays

Annual bonus up to £2,250

Family-friendly policies

Leading pension scheme

Sharesave

Training and development with Academy

Electric vehicle scheme

Volunteer days

Job summary

Severn Trent in Coventry is seeking an Information Security Risk and Compliance Analyst to join our Technology team. You’ll identify, measure and report information security risk, support governance, risk and compliance activities, and work with stakeholders and external providers to drive secure practices.

You will develop security dashboards and KRIs, run awareness campaigns including phishing simulations, and ensure regulatory standards such as GDPR, NIS-R and PCI DSS are translated into

Qualifications

• Experience in regulated environments with GDPR, NIS-R, PCI DSS.
• Ability to develop and maintain cyber security reporting dashboards and metrics.
• Awareness of Zero Trust principles and security controls.

Responsibilities

• Support Information Security Risk & Compliance Manager and Officer in implementing cybersecurity policies and controls.
• Conduct security compliance assessments and track remediation activities.
• Develop and deliver cyber security awareness campaigns, including phishing simulations.
• Support governance, risk and compliance processes to keep security at the forefront.
• Develop and maintain cyber security reporting dashboards with KRIs and metrics.
• Apply knowledge of regulatory frameworks like PCI DSS and NIS-R to organisational controls.

Skills

Information security

Regulatory compliance

Phishing simulations

Zero Trust awareness

Security dashboards

Job description

LET’S CUT STRAIGHT TO IT

At Severn Trent, our people are at the heart of everything we do.We’rein the top 5% of utility companies worldwide for employee engagement, andwe’reequally proud of our strong Glassdoor score — reflecting how much our peopleloveworking here.Join us to make a positive impact on the environment and our communities, while being valued and supported in a truly inclusive workplace. If you want to do more, because you care, we want you on our team.

LET’S TELL YOU MORE

We provide a critical national infrastructure to millions of customers in our region. This makes us a high-profile target for cyber-attacks on our IT systems, which if successful, could have disastrous consequences for our customers, colleagues, and the communities we serve. Our Information Security team do a wonderful job in protecting the business, its people, and customers from these daily threats, and we have an opportunity for you to join us as anInformation Security Risk and Compliance Analyst.

Working within the Technology team the Information Security Compliance Analyst plays a key role identifying, measuring and reporting on our information security compliance and risk position and supporting information security gap analysis and remediation across Severn Trent. Build a collaborative relationship with stakeholders from across the organisation along with external service providers to influence and drive necessary changes in practices and procedures that support a secure and stable platform.

The role will be based at our Severn Trent Centre head officeinCoventry.You’ll work within our dedicated team.

EVERYTHING YOU NEED TO KNOW

• Support the Information Security Risk & Compliance Manager and Officer in implementing and embedding cybersecurity policies and controls across a range of business areas.
• Conduct security compliance assessments, tracking remediation activities and ensuring actions are completed effectively.
• Experience of developing and delivering engaging cyber security awareness campaigns, including the planning and execution of phishing simulations to improve employee awareness and strengthen security behaviours.
• Support the ongoing development of our security governance, risk and compliance processes, ensuring security remains at the forefront of everything we do.
• Experience of developing and maintaining cyber security reporting dashboards, using meaningful metrics and key risk indicators (KRIs) to provide clear insight into cyber risk, compliance and security performance.
• Experience of working with relevant cyber security regulatory and compliance frameworks, such as PCI DSS and NIS-R, with an understanding of how regulatory requirements translate into organisational controls and assurance activities.

This is a great opportunity for someone looking to continue their career in Information Security, gaining exposure across governance, risk, compliance and security operations within a complex and evolving technology environment.

what We’re Looking For

You’ll join the team with experience in Information Security and be passionate about the field, keeping up to date with emerging threats and technologies.

To be successful, you’ll need experience of working within a regulated environment, with knowledge of regulatory standards such as GDPR, NIS-R, PCI DSS. You should also have experience in managing cyber security awareness campaigns, and development and maintenance of cyber security reporting dashboards. Awareness of applying Zero Trust principles to routine tasks would be beneficial.

Skills and experience are important, but character, positivity, and a caring attitude matter too. We welcome people from all walks of life and celebrate individuality as we know diverse minds, experiences and backgrounds help us to learn and better serve our communities. We seek people who get involved, want to be part of something bigger, and make a difference because they care.

HOW WE’LL REWARD AND CARE FOR YOU IN RETURN

Benefits

• 28 days holiday + bank holidays (and the ability to buy/ sell up to 5 days per year)
• Annual bonus scheme (of up to £2,250, which is subject to eligibility)
• Family-friendly policies (including a year off fully paid maternity and adoption leave)
• Leading pension scheme – we will double your contribution (up to 15% when you contribute 7.5%)
• Sharesave – the chance to buy Severn Trent plc shares at a discounted rate
• Dedicated training and development with our Academy
• Electric vehicle scheme and retail offers
• Two paid volunteering days per year