Principal Digital Specialist (Networks and Cybersecurity)

Scottish Water; Glasgow, Stepps; Híbrido; GBP 55.000 - 74.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid working

Pension

Life assurance

Company bonus scheme

SW Splash discounts

Descripción de la vacante

Scottish Water is seeking a Cyber-Security Architect to shape security across our digital and OT landscape. You will define patterns, guardrails and standards to ensure secure, resilient water services, working with cloud, enterprise, OT, and engineering teams.

Role requires deep cyber-security architecture expertise, knowledge of IEC 62443 and ISO 27001, and the ability to translate risk into pragmatic security decisions while driving secure by design practices.

Formación

• Experience in cyber-security architecture, OT security, cloud security or infrastructure security across enterprise and OT environments.
• Practical knowledge of IEC 62443 and ISO 27001 principles for risk-based information security management.

Responsabilidades

• Design secure digital water systems by defining architecture patterns, standards and guardrails for interconnected water systems.
• Ensure security is embedded from the outset so digital services are resilient and trusted.
• Balance safety, reliability, availability and security across OT and enterprise environments.

Conocimientos

Cyber-security architecture

Operational technology security

Cloud security

Infrastructure security

Herramientas

Azure

Descripción del empleo

Cyber-Security Architect

Protect Scotland's Digital Water Future

Together we are Trusted to Serve Scotland.

Scottish Water is building an increasingly connected digital water system, bringing together cloud platforms, data, applications, operational technology, telemetry, SCADA and cyber-physical assets across the water network. We're now looking for a talented and forward-thinking Cyber-Security Architect to help ensure these systems are designed, protected and operated to the highest standards of cybersecurity, resilience and trust.

This role sits within the Digital Strategy, Architecture & Platforms function and reports directly to the Digital Architecture Manager. You will shape cyber-security architecture across our digital and operational landscape, helping to protect essential services, reduce the risk of disruption, and support safe, secure and reliable water services for Scotland.

About the Role

As Cyber-Security Architect, you will provide architectural leadership across Scottish Water's enterprise, cloud and operational technology environments. You'll work closely with Cyber Security, Cloud Architecture, Enterprise Architecture, Digital Platforms, Operational Technology, engineering teams and business stakeholders to ensure cyber-security is embedded by design across our interconnected digital water ecosystem.

This role is ideal for an experienced cyber-security, operational technology, cloud security or infrastructure architect who understands the importance of protecting critical national infrastructure, cyber-physical systems and modern cloud platforms from evolving cyber threats.

What You'll Be Doing

As a Cyber Security Architect, you will design secure digital water systems by defining cyber-security architecture patterns, standards and guardrails for interconnected water systems, including cloud platforms, applications, networks, telemetry, SCADA and operational technology. You will ensure security is embedded from the outset so digital services are resilient, trusted and designed to minimise the likelihood and impact of operational disruption.

You will play a key role in protecting cyber-physical systems by applying recognised operational technology security principles, including IEC 62443 concepts such as zones, conduits, security levels, lifecycle security and defence-in-depth, to help protect our cyber-physical water assets. Working closely with OT, engineering and cyber-security teams, you will help balance safety, reliability, availability and security across critical operational environments.

The role will involve shaping cloud and enterprise security architecture by designing and assuring secure cloud and enterprise architectures aligned to ISO 27001 principles. This includes areas such as risk management, identity, access control, data protection, monitoring, incident response and continual improvement. You will partner with Cloud Architects and platform teams to ensure our cloud services are secure, scalable, resilient and operationally supportable.

You will provide cyber-security assurance and governance through architectural oversight and security assurance for major digital, cloud, infrastructure and operational technology programmes. Translating cyber risks into clear design decisions, control requirements and pragmatic delivery guidance, you will support project teams and senior stakeholders while championing security-by-design, zero trust principles, secure integration, least privilege, monitoring, resilience and recovery across the technology landscape.

In addition, you will help build cyber-security capability and culture by working collaboratively across digital, cyber, engineering and operational teams to raise awareness, improve decision-making and embed a proactive cyber-security culture across Scottish Water.

What You'll Bring

We're looking for someone with strong experience in cyber-security architecture, operational technology security, cloud security, infrastructure security or a closely related discipline. You will understand how to secure complex, interconnected environments spanning cloud platforms, enterprise systems, networks, applications and cyber-physical operational assets.

You will have practical knowledge of IEC 62443 and how it can be applied to protect industrial automation, control systems and operational technology environments, alongside an understanding of ISO 27001 principles and how to apply risk-based information security management to cloud and enterprise platforms.

You'll be able to communicate complex cyber-security risks, controls and architectural decisions clearly to both technical and non-technical stakeholders. Just as importantly, you'll bring curiosity, pragmatism and a continuous improvement mindset, with a strong focus on protecting essential services and reducing operational disruption.

Experience with Azure, identity and access management, network segmentation, SIEM/SOC integration, incident response, critical national infrastructure, water utilities or other regulated operational environments would all be advantageous.

What We Offer

You’ll join a collaborative and future-focused digital organisation with the chance to make a tangible impact on how Scottish Water protects and operates essential services. You’ll help shape secure digital architecture, strengthen resilience across our interconnected water systems, and support the safe, reliable delivery of water services for communities across Scotland.

Looking out for you

While the work we do is important, we know it's not the only thing that matters. That's why we make sure you have everything you need to find a good work-life balance.

This is a full-time role (35 hours per week) and you’ll get plenty of time to recharge with 38 days of holiday every year (including public holidays). And you can even buy five more if you need a little extra time. You can also take time off to volunteer in your community.

When it comes to major life events we have family-friendly policies around adoption, maternity, and parental leave. And for the everyday? We embrace flexible working.

For your future, there's our pension (the know-what-you’ll-get-when-you-retire' kind), and life assurance.

As for some nice extras? You will participate in a company bonus scheme. Not to mention access to SW Splash - handy rewards that can save you money on holidays, bills, and shopping.

The not-so-small print

This role will be a Grade 8. If you're new to Scottish Water, you'll join us on a starting salary of £54,776. Performance-driven pay progression would then allow you to move through the range to a maximum of £74,386

midnight on 15th October 2026.

We operate Balanced Hybrid working at Scottish Water and we encourage people to work half their time in a Scottish Water location.

Job offers at Scottish Water are conditional, and will be confirmed on completion of our pre-employment screening, e.g. referencing, criminal record checks, license checks, etc. Screening is conducted on our behalf by a third party, and must be completed before your start date. Don't worry - we'll only start these checks once you've accepted an offer.