Information Security Risk and Compliance Analyst

LET’S CUT STRAIGHT TO ITAt Severn Trent, our people are at the heart of everything we do. We’re in the top 5% of utility companies worldwide for employee engagement, and we’re equally proud of our strong Glassdoor score — reflecting how much our people love working here.   Join us to make a positive impact on the environment and our communities, while being valued and supported in a truly inclusive workplace. 

If you want to do more, because you care, we want you on our team.  LET’S TELL YOU MOREWe provide a critical national infrastructure to millions of customers in our region. This makes us a high-profile target for cyber-attacks on our IT systems, which if successful, could have disastrous consequences for our customers, colleagues, and the communities we serve.

Our Information Security team do a wonderful job in protecting the business, its people, and customers from these daily threats, and we have an opportunity for you to join us as an Information Security Risk and Compliance Analyst. Working within the Technology team the Information Security Compliance Analyst plays a key role identifying, measuring and reporting on our information security compliance and risk position and supporting information security gap analysis and remediation across Severn Trent.

Build a collaborative relationship with stakeholders from across the organisation along with external service providers to influence and drive necessary changes in practices and procedures that support a secure and stable platform.

You’ll so apply methods including control assessments, audits and stakeholder education to deliver ongoing feedback on adoptions and identifying emerging risks.

The role will be based at our Severn Trent Centre head officein Coventry.  You’ll work within our dedicated team. With this being such a critical role, we’re looking for someone who can join us 37 hours a week, working Monday to Friday.

EVERYTHING YOU NEED TO KNOW Support the Information Security Risk & Compliance Manager and Officer in implementing and embedding cybersecurity policies and controls across a range of business areas.

Conduct security audits and compliance assessments, tracking remediation activities and ensuring actions are completed effectively.

Analyse and present findings, risks and recommendations to support informed decision-making and continuous improvement.

Identify knowledge, awareness and behavioural gaps across the organisation, helping to drive targeted security education and engagement initiatives.

Assist with the operation and monitoring of security tools and systems, helping to identify, investigate and escalate potential security incidents where required.

Support the ongoing development of our security governance, risk and compliance processes, ensuring security remains at the forefront of everything we do.

This is a great opportunity for someone looking to develop their career in Information Security, gaining exposure across governance, risk, compliance and security operations within a complex and evolving technology environment.

WHAT WE’RE LOOKING FORYou’ll join the team with experience in Information Security and be passionate about the field, keeping up to date with emerging threats and technologies.

To be successful, you’ll need experience of managing control frameworks and working within a regulated environment, with knowledge of regulatory standards such as GDPR, NISR, PCI DSS. You should also have experience in managing Information Security risk and security testing, along with an in-depth knowledge of control frameworks and how they can be effectively applied to manage risk. Awareness of applying Zero Trust principles to routine tasks would be beneficial.

Skills and experience are important, but character, positivity, and a caring attitude matter too.  We welcome people from all walks of life and celebrate individuality as we know diverse minds, experiences and backgrounds help us to learn and better serve our communities. We seek people who get involved, want to be part of something bigger, and make a difference because they care.

HOW WE’LL REWARD AND CARE FOR YOU IN RETURNIt's not just a job; it's a career. We offer…