Information Security Risk and Compliance Analyst

Severn Trent Plc; Coventry; Hybrid; GBP 50,000 - 70,000; Full time

Benefits offered by this job

28 days holiday

Annual bonus

Family policies

Pension scheme

Sharesave

Training and development

EV scheme

Volunteer days

Job summary

Severn Trent Plc is seeking an Information Security Risk and Compliance Analyst based in Coventry to protect our critical national infrastructure and support governance, risk and compliance across a complex technology environment.

You will work with the Information Security team to identify, measure and report on information security compliance and risk, driving gap analysis and remediation with internal and external partners.

Qualifications

• Experience in information security within a regulated environment.
• Knowledge of GDPR, NIS-R, PCI DSS.
• Ability to develop and maintain security dashboards.
• Experience with security governance, risk and compliance.

Responsibilities

• Support risk and compliance manager implementing cybersecurity policies across the business.
• Conduct security compliance assessments and track remediation activities.
• Develop cybersecurity reporting dashboards with meaningful metrics and KRIs.
• Collaborate with stakeholders and external providers to drive changes in practices and controls.
• Contribute to governance, risk and compliance across a complex technology environment.

Skills

Information security

Regulatory compliance

Phishing simulations

Zero Trust

Job description

Information Security Risk and Compliance Analyst

LET’S CUT STRAIGHT TO IT

At Severn Trent, our people are at the heart of everything we do.We’rein the top 5% of utility companies worldwide for employee engagement, andwe’reequally proud of our strong Glassdoor score — reflecting how much our peopleloveworking here. Join us to make a positive impact on the environment and our communities, while being valued and supported in a truly inclusive workplace. If you want to do more, because you care, we want you on our team.

LET’S TELL YOU MORE

We provide a critical national infrastructure to millions of customers in our region. This makes us a high-profile target for cyber-attacks on our IT systems, which if successful, could have disastrous consequences for our customers, colleagues, and the communities we serve. Our Information Security team do a wonderful job in protecting the business, its people, and customers from these daily threats, and we have an opportunity for you to join us as anInformation Security Risk and Compliance Analyst.

Working within the Technology team the Information Security Compliance Analyst plays a key role identifying, measuring and reporting on our information security compliance and risk position and supporting information security gap analysis and remediation across Severn Trent. Build a collaborative relationship with stakeholders from across the organisation along with external service providers to influence and drive necessary changes in practices and procedures that support a secure and stable platform.

The role will be based at our Severn Trent Centre head officeinCoventry.You’ll work within our dedicated team.

EVERYTHING YOU NEED TO KNOW

Support the Information Security Risk & Compliance Manager and Officer in implementing and embedding cybersecurity policies and controls across a range of business areas.

Conduct security compliance assessments, tracking remediation activities and ensuring actions are completed effectively.

Experience of developing and delivering engaging cyber security awareness campaigns, including the planning and execution of phishing simulations to improve employee awareness and strengthen security behaviours.

Support the ongoing development of our security governance, risk and compliance processes, ensuring security remains at the forefront of everything we do.

Experience of developing and maintaining cyber security reporting dashboards, using meaningful metrics and key risk indicators (KRIs) to provide clear insight into cyber risk, compliance and security performance.

Experience of working with relevant cyber security regulatory and compliance frameworks, such as PCI DSS and NIS-R, with an understanding of how regulatory requirements translate into organisational controls and assurance activities.

This is a great opportunity for someone looking to continue their career in Information Security, gaining exposure across governance, risk, compliance and security operations within a complex and evolving technology environment.

WHAT WE’RE LOOKING FOR

You’ll join the team with experience in Information Security and be passionate about the field, keeping up to date with emerging threats and technologies.

To be successful, you’ll need experience of working within a regulated environment, with knowledge of regulatory standards such as GDPR, NIS-R, PCI DSS. You should also have experience in managing cyber security awareness campaigns, and development and maintenance of cyber security reporting dashboards. Awareness of applying Zero Trust principles to routine tasks would be beneficial.

Skills and experience are important, but character, positivity, and a caring attitude matter too. We welcome people from all walks of life and celebrate individuality as we know diverse minds, experiences and backgrounds help us to learn and better serve our communities. We seek people who get involved, want to be part of something bigger, and make a difference because they care.

HOW WE’LL REWARD AND CARE FOR YOU IN RETURN

It's not just a job; it's a career. We offer benefits that reward great work and award-winning training to help you reach your potential. Plus, you'll contribute to the environment and community too. Here are some of our favourites:

28 days holiday + bank holidays (and the ability to buy/ sell up to 5 days per year)

Annual bonus scheme (of up to £2,250, which is subject to eligibility)

Family-friendly policies (including a year off fully paid maternity and adoption leave)

Leading pension scheme – we will double your contribution (up to 15% when you contribute 7.5%)

Sharesave – the chance to buy Severn Trent plc shares at a discounted rate

Dedicated training and development with our Academy

Electric vehicle scheme and retail offers

Two paid volunteering days per year

LET’S GO