Information Security Risk and Compliance Analyst

Severn Trent Water; Coventry; On-site; GBP 50,000 - 70,000; Full time

Benefits offered by this job

28 days holiday + bank holidays (and 5

Annual bonus scheme up to £2,225

Family-friendly policies including a 1

Leading pension scheme – up to 15%

Sharesave – discounted Severn Trent股份

Dedicated training and development

Electric vehicle scheme

Two paid volunteering days

Job summary

Severn Trent Water is recruiting an Information Security Risk and Compliance Analyst to join the Technology team in Coventry. The role focuses on identifying, measuring and reporting information security risk, supporting gap analysis and remediation across the business.

You will collaborate with stakeholders and external providers, applying control assessments and audits to support ongoing improvements in security governance and incident response. 37 hours per week, Monday to Friday.

Qualifications

• Experience in information security and risk management.
• Knowledge of regulatory standards and how to apply them.
• Experience with security testing and risk assessments.

Responsibilities

• Support the Information Security Risk & Compliance Manager in implementing policies and controls.
• Conduct security audits and track remediation activities.
• Analyse findings and risks to inform decisions and improvements.
• Help drive security education and awareness across the organisation.

Skills

Information Security

Regulatory standards

GDPR

PCI DSS

Security testing

Job description

Select how often (in days) to receive an alert:

Information Security Risk and Compliance Analyst

LET’S CUT STRAIGHT TO IT

At Severn Trent, our people are at the heart of everything we do.We’rein the top 5% of utility companies worldwide for employee engagement, andwe’reequally proud of our strong Glassdoor score — reflecting how much our peopleloveworking here.

Join us to make a positive impact on the environment and our communities, while being valued and supported in a truly inclusive workplace.

If you want to do more, because you care, we want you on our team.

LET’S TELL YOU MORE

We provide a critical national infrastructure to millions of customers in our region. This makes us a high-profile target for cyber-attacks on our IT systems, which if successful, could have disastrous consequences for our customers, colleagues, and the communities we serve.

Our Information Security team do a wonderful job in protecting the business, its people, and customers from these daily threats, and we have an opportunity for you to join us as anInformation Security Risk and Compliance Analyst.

Working within the Technology team the Information Security Compliance Analyst plays a key role identifying, measuring and reporting on our information security compliance and risk position and supporting information security gap analysis and remediation across Severn Trent. Build a collaborative relationship with stakeholders from across the organisation along with external service providers to influence and drive necessary changes in practices and procedures that support a secure and stable platform.

You’ll so apply methods including control assessments, audits and stakeholder education to deliver ongoing feedback on adoptions and identifying emerging risks.

The role will be based at our Severn Trent Centre head officeinCoventry.You’ll work within our dedicated team. With this being such a critical role, we’re looking for someone who can join us37 hours a week,working Monday to Friday.

EVERYTHING YOU NEED TO KNOW

• Support the Information Security Risk & Compliance Manager and Officer in implementing and embedding cybersecurity policies and controls across a range of business areas.
• Conduct security audits and compliance assessments, tracking remediation activities and ensuring actions are completed effectively.
• Analyse and present findings, risks and recommendations to support informed decision-making and continuous improvement.
• Identify knowledge, awareness and behavioural gaps across the organisation, helping to drive targeted security education and engagement initiatives.
• Assist with the operation and monitoring of security tools and systems, helping to identify, investigate and escalte potential security incidents where required.
• Support the ongoing development of our security governance, risk and compliance processes, ensuring security remains at the forefront of everything we do.

This is a great opportunity for someone looking to develop their career in Information Security, gaining exposure across governance, risk, compliance and security operations within a complex and evolving technology environment.

WHAT WE’RE LOOKING FOR

You’ll join the team with experience in Information Security and be passionate about the field, keeping up to date with emerging threats and technologies.

To be successful, you’ll need experience of managing control frameworks and working within a regulated environment, with knowledge of regulatory standards such as GDPR, NISR, PCI DSS. You should also have experience in managing Information Security risk and security testing, along with an in-depth knowledge of control frameworks and how they can be effectively applied to manage risk.

Awareness of applying Zero Trust principles to routine tasks would be beneficial.

Skills and experience are important, but character, positivity, and a caring attitude matter too. We welcome people from all walks of life and celebrate individuality as we know diverse minds, experiences and backgrounds help us to learn and better serve our communities. We seek people who get involved, want to be part of something bigger, and make a difference because they care.

HOW WE’LL REWARD AND CARE FOR YOU IN RETURN

It's not just a job; it's a career. We offer benefits that reward great work and award-winning training to help you reach your potential. Plus, you'll contribute to the environment and community too. Here are some of our favourites:

• 28 days holiday + bank holidays (and the ability to buy/ sell up to 5 days per year)
• Annual bonus scheme (of up to £2,225, which is subject to eligibility)
• Family-friendly policies (including a year off fully paid maternity and adoption leave)
• Leading pension scheme – we will double your contribution (up to 15% when you contribute 7.5%)
• Sharesave – the chance to buy Severn Trent plc shares at a discounted rate
• Dedicated training and development with our Academy
• Electric vehicle scheme and retail offers
• Two paid volunteering days per year

LET’S GO