Information Security Risk and Compliance Analyst

LET’S CUT STRAIGHT TO IT

At Severn Trent, our people are at the heart of everything we do. We’re in the top 5% of utility companies worldwide for employee engagement, and we’re equally proud of our strong Glassdoor score — reflecting how much our people love working here.  Join us to make a positive impact on the environment and our communities, while being valued and supported in a truly inclusive workplace.   If you want to do more, because you care, we want you on our team.  

LET’S TELL YOU MORE

We provide a critical national infrastructure to millions of customers in our region. This makes us a high-profile target for cyber-attacks on our IT systems, which if successful, could have disastrous consequences for our customers, colleagues, and the communities we serve. Our Information Security team do a wonderful job in protecting the business, its people, and customers from these daily threats, and we have an opportunity for you to join us as an Information Security Risk and Compliance Analyst. 

Working within the Technology team the Information Security Compliance Analyst plays a key role identifying, measuring and reporting on our information security compliance and risk position and supporting information security gap analysis and remediation across Severn Trent. Build a collaborative relationship with stakeholders from across the organisation along with external service providers to influence and drive necessary changes in practices and procedures that support a secure and stable platform.

The role will be based at our Severn Trent Centre head office in Coventry.  You’ll work within our dedicated team.

EVERYTHING YOU NEED TO KNOW

• Support the Information Security Risk & Compliance Manager and Officer in implementing and embedding cybersecurity policies and controls across a range of business areas.
• Conduct security compliance assessments, tracking remediation activities and ensuring actions are completed effectively.
• Experience of developing and delivering engaging cyber security awareness campaigns, including the planning and execution of phishing simulations to improve employee awareness and strengthen security behaviours.
• Support the ongoing development of our security governance, risk and compliance processes, ensuring security remains at the forefront of everything we do.
• Experience of developing and maintaining cyber security reporting dashboards, using meaningful metrics and key risk indicators (KRIs) to provide clear insight into cyber risk, compliance and security performance.
• Experience of working with relevant cyber security regulatory and compliance frameworks, such as PCI DSS and NIS-R, with an understanding of how regulatory requirements translate into organisational controls and assurance activities.
  
  

This is a great opportunity for someone looking to continue their career in Information Security, gaining exposure across governance, risk, compliance and security operations within a complex and evolving technology environment.

 what We’re Looking For

 

You’ll join the team with experience in Information Security and be passionate about the field, keeping up to date with emerging threats and technologies.

To be successful, you’ll need experience of working within a regulated environment, with knowledge of regulatory standards such as GDPR, NIS-R, PCI DSS. You should also have experience in managing cyber security awareness campaigns, and development and maintenance of cyber security reporting dashboards. Awareness of applying Zero Trust principles to routine tasks would be beneficial.

Skills and experience are important, but character, positivity, and a caring attitude matter too.  We welcome people from all walks of life and celebrate individuality as we know diverse minds, experiences and backgrounds help us to learn and better serve our communities. We seek people who get involved, want to be part of something bigger, and make a difference because they care.

HOW WE’LL REWARD AND CARE FOR YOU IN RETURN

Benefits

 It's not just a job; it's a career. We offer benefits that reward great work and award-winning training to help you reach your potential. Plus, you'll contribute to the environment and community too. Here are some of our favourites:

 

• 28 days holiday + bank holidays (and the ability to buy/ sell up to 5 days per year)
• Annual bonus scheme (of up to £2,250, which is subject to eligibility)
• Family-friendly policies (including a year off fully paid maternity and adoption leave)
• Leading pension scheme – we will double your contribution (up to 15% when you contribute 7.5%) 
• Sharesave – the chance to buy Severn Trent plc shares at a discounted rate
• Dedicated training and development with our Academy
• Electric vehicle scheme and retail offers
• Two paid volunteering days per year
  
  

 LET’S GO

We can't wait to hear from you! Have an updated CV ready and spare five minutes to apply. We'll let you know the outcome after the closing date, so keep an eye on your phone and emails.