Security Operations Analyst

South West Water; Exeter; On-site; GBP 30,000 - 44,000; Full time

Job summary

Join a leading company in the water industry as a Security Operations Analyst. You will be responsible for monitoring threats to information assets, investigating incidents, and ensuring compliance with security policies. This permanent role based in Exeter offers a competitive salary and a comprehensive benefits package.

Benefits

Generous holiday allowance

Discretionary bonus

Competitive contributory pension

Share-save scheme

Cycle to work scheme

Financial support services

Qualifications

• Experience in an IT function is required.
• A solid understanding of cyber security principles and threat assessments.
• Knowledge of risk management frameworks such as ISO27001 is preferred.

Responsibilities

• Monitor and respond to IT security threats.
• Investigate security incidents and breaches.
• Perform threat management and reporting.

Skills

Problem solving

Analytical skills

Network protocols

Cyber threat identification

Education

CISSP

CEH

GIAC

Job description

Exeter, England /Technology /Permanent full-time

At Pennon Group, we’re proud to be leading the way in the water and renewables industries. Alongside our subsidiaries - South West Water, Bristol Water, Bournemouth Water, SES Water, Pennon Water Services and Pennon Power - we’re committed to delivering a sustainable future of our region. Because we know that by continually driving up our standards today, we’ll build a better tomorrow for our communities.

New opportunity for a Security Operations Analyst to join our IT Security Operations Team based in Exeter. This is a permanent full time with a salary ranging from £30,000-£44,000 plus benefits.

The role

The role of the Security Operations Analyst is to monitor, investigate and respond to threats against Pennon Group’s information assets.

Reporting to the Security Operations Manager the role will focus on ensuring that the organisation’s systems are available and resilient, as well as monitor and investigate activities relevant to Information Security Policies and regulatory standards.

What you’ll be doing

• Monitor and respond to threats against Pennon’s information assets.
• Monitor and disseminate external guidance on IT security issues, standards, technologies and services and industry alerts and warnings.
• Maintain up-to-date detailed knowledge of the information security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.
• Perform threat management, threat modelling, identify threat vectors and develop use cases for security monitoring.
• Investigate and report on IT security incidents and breaches of IT Security policies, working alongside Digital&IT and business teams to respond to and resolve.
• Conduct internal reviews, assessments and audits on internal security and usage policies against legal obligations.
• Promote awareness of and positive practices around the Information Security Policy and security ‘culture’.
• Management, administration & maintenance of security devices under the management of the Information Security function.
• Assist with any evaluations and implementations of technical security solutions for compliance to current information security standards and policies.

What we’re looking for

• Experience of working within an IT function.
• Good understanding of network concepts - protocols, firewalls, routing.
• Proficient in Incident Management and Response procedures and familiarity of ITIL.
• Skills in identifying and analysing potential cyber threats.
• Strong problem solving and analytical skills with an attention to detail.
• In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management and incident management.
• Knowledge of organisation IT/OT applications, databases, operating systems to address security threats against the same.
• Ideally hold recognised Information Security qualification (e.g. CISSP, CEH, GIAC) and experience working with Information Security standards and frameworks such as ISO27001 and Cyber Essentials.
• Ability to complete UK Government Security Clearance (SC) process successfully

What’s in it for you

• We know that the support and commitment of our staff is key to our success so you will receive the opportunity for ongoing development and training for a long-term career with us. We’re one of the largest companies in the South West and are proud to have been awarded Investors in People recognition. In return, we offer an excellent range of benefits including:
• Generous holiday allowance plus bank holidays
• A discretionary Bonus
• Competitive Contributory Pension
• Share-save Scheme
• A range of Group Discounts
• Cycle to Work Scheme
• Financial support services
• And plenty more!

Closing date: 15th July 2025

Be yourself, we like it that way. Together, we will build a culture of belonging, where inclusion is instinctive. Diversity is our strength and a reflection of our communities. We care, we value everyone, we celebrate uniqueness.

Our core values which are essential to our success are:

Be Rock Solid - Build trust and be trusted. Be the one we all look to and can depend on.

Be You - We want you to bring your best everyday. Be yourself and make your mark in your individual way.

Be the Future - Embrace change. Drive Progress. Own the challenge.

We're always pleased to hear from talented people. So if you have any questions about the opportunities that we have available, or if there's anything else you'd like to know before you apply (or indeed during the application process), please don't hesitate to send your details to our Talent Acquisition Team.