Threat & Vulnerability Analyst – Cyber Risk (Hybrid)

Thames Water; Reading; Hybrid; GBP 52,000 - 65,000; Full time

Benefits offered by this job

Salary up to £65k

Annual leave 26–30 days

Pension scheme

Wellbeing benefits

Job summary

Thames Water is seeking a Cyber Threat & Vulnerability Analyst to join our Cyber Security team, protecting the systems that deliver essential water services to millions of customers. You’ll identify, assess, and reduce cyber risk by understanding vulnerabilities and driving fixes before exploitation.

This hands-on role collaborates with technical teams and business stakeholders to strengthen security posture, monitor risk, and deliver clear dashboards and actionable mitigation steps.

Qualifications

• Experience supporting vulnerability management and patching in complex environments.
• Understanding of vulnerability management and threat assessment concepts.
• Ability to work with technical teams to remediate security issues.
• Experience with vulnerability scanners or similar tools.
• Ability to explain security issues to technical and non-technical audiences.
• Awareness of security governance across cloud, servers, and OT/IT.

Responsibilities

• Support end-to-end vulnerability management across IT and operational technology environments.
• Help shape and improve threat and vulnerability management processes, frameworks, and ways of working.
• Work with technical and business teams to prioritise and remediate vulnerabilities based on risk.
• Investigate new vulnerabilities and recommend clear, practical mitigation actions.
• Support integration of vulnerability scanning tools into existing systems and processes.
• Build and maintain dashboards that show cyber risk, trends, and remediation progress in a clear way.
• Contribute to threat assessments and support proactive threat hunting activities.
• Help ensure alignment with standards such as GDPR, PCI DSS, NIS, and ISO 27001.
• Monitor vulnerability management tools and processes, identifying ways to improve effectiveness and reduce risk.

Skills

Vulnerability management

Threat assessment

Security tooling

Communication skills

IT/OT awareness

Education

Cyber security certification (e.g., CISSP/CISM/CCSP)

Job description

Thames Water is seeking a Cyber Threat & Vulnerability Analyst to join our Cyber Security team, protecting the systems that deliver essential water services to millions of customers. You’ll identify, assess, and reduce cyber risk by understanding vulnerabilities and driving fixes before exploitation.

This hands-on role collaborates with technical teams and business stakeholders to strengthen security posture, monitor risk, and deliver clear dashboards and actionable mitigation steps.