Policy Support Lead

Pertemps; England; Hybrid; GBP 50,000 - 60,000; Full time

Job summary

A leading water and wastewater company in the UK is seeking a Policy Support Analyst to develop and maintain security policies. This hybrid role based in Reading will involve overseeing compliance and managing relationships with key stakeholders. Candidates should have experience in information security, sound communication skills, and the ability to work independently. The company offers a competitive salary, generous annual leave, and various health and well-being benefits.

Benefits

Competitive salary up to £60,000

26 days holiday per year

Performance-related pay

Generous pension scheme through AON

Health and well-being benefits

Qualifications

• Experience in information security or a related governance role.
• Experience applying security frameworks and regulatory requirements (CIS, GDPR, NIS-R).
• Proven ability to work independently.

Responsibilities

• Develop and maintain comprehensive security policies and standards.
• Monitor compliance with security policies across teams.
• Build relationships with key stakeholders.

Skills

Information security experience

Stakeholder management

Written and verbal communication

Compliance monitoring

Education

Relevant certifications (CISSP, CISM, CISA)

Job description

The Policy Support Analyst will be responsible for developing, implementing, and maintaining security policies, standards, and procedures to protect our information assets. This role requires a good understanding of security frameworks and regulatory requirements, as well as experience in Information Security.

The role is based in Reading and reports directly to the Head of Governance, Risk and Compliance. It demands independent work, fulfillment in a fast‑paced environment, and accountability for programme needs.

What you’ll do as a Policy Support Lead

Security Standards Management

• Develop and maintain comprehensive security policies, standards and procedures across the organisation.
• Align all standards with applicable regulatory requirements and frameworks (e.g., ISO 27001, GDPR, NIS‑R).
• Review and update standards regularly in response to emerging threats and regulatory changes.

Governance & Compliance

• Oversee the exception management framework, including reporting, approvals and reviews prior to expiry.
• Monitor compliance with security policies and standards across digital and business teams.
• Act as the primary point of contact for internal and external audits related to security standards.

Service Delivery & Operations

• Coordinate the annual standards review cycle, ensuring timely updates and stakeholder engagement.
• Support the publication and socialisation of new or revised standards to ensure organisation‑wide awareness.
• Collaborate with cross‑functional teams to embed security best practices into digital processes.

Stakeholder & Communications Management

• Build and maintain relationships with key stakeholders, including the CISO, CIO, architecture teams, programme delivery and business owners.
• Provide clear, engaging, and relevant communication and training around security standards.
• Deliver security messaging both in person and virtually, ensuring consistency and clarity.

Continuous Improvement

• Track policy effectiveness and recommend enhancements to improve standard adoption and compliance.
• Stay informed of the latest security regulations, technologies and industry best practices to ensure standards remain current and effective.

Base location – Hybrid – Clearwater Court, Reading.
Working pattern – 36 hours Monday to Friday.

What you should bring to the role

Essential Experience

• Experience in information security or a related governance role.
• Experience applying security frameworks and regulatory requirements (CIS, GDPR, NIS‑R).
• Experience collaborating across multiple business areas and functional teams.
• Proven ability to work independently, with strong stakeholder management capabilities.

Essential Technical Skills & Qualifications

• Strong written and verbal communication skills with the ability to deliver complex messages clearly.
• Skilled in exception management, reporting and compliance monitoring.

Desirable Experience

• Experience maintaining security standards and exception frameworks.
• Exposure to information risk management processes and controls.

Desirable Technical Skills & Qualifications

• Relevant certifications such as CISSP, CISM or CISA.

Desirable Competencies

• Strong relationship building and collaboration skills.
• Excellent organisational and time management skills.
• Ability to influence stakeholders and drive compliance in a matrixed environment.

What’s in it for you

• Competitive salary up to £60,000 per annum, depending on experience.
• Annual leave – 26 days holiday per year, increasing to 30 with length of service (plus bank holidays).
• Performance‑related pay plan linked to company and individual targets.
• Generous pension scheme through AON.
• Access to health, wellbeing and financial benefits (annual health MOTs, physiotherapy, counselling, Cycle‑to‑Work, vouchers, life assurance).

Find out more about our benefits and perks.

Who are we

We’re the UK’s largest water and wastewater company, serving over 16 million customers. We focus on building a better future for all – people, communities and the planet – and need passionate, skilled individuals to help us achieve that vision.

Learn more about our purpose and values

Working at Thames Water

Thames Water is a highly rewarding and diverse place to work. Every day you can make a difference, enjoy flexible working arrangements, and benefit from excellent benefits.

We’re committed to being a great, diverse and inclusive workplace. We welcome all applicants and offer support throughout the recruitment process. If you need adjustments, let us know and we will accommodate you.

Real purpose, real support, real opportunities – join the Thames Water family. Learn more.

We will close the advert earlier than the advertised date due to high volume of applications. Apply soon to avoid disappointment.