Cyber Security GRC Analyst

South West Water keeps the South West flowing with safe, reliable drinking water and wastewater services across some of the UK’s most stunning landscapes.

We’re proud to be part of Pennon Group, a leader in the UK water sector, working towards a greener future. Our goals? As well as lowering our carbon footprint, we’re working with partners to plant 300,000 trees, restore peatlands and supporting farmers and landowners to improve water quality and wildlife.

Whether you’re starting out or seeking a new challenge, our scale and ambition create opportunities for you to shape your own career.

Ready to make a splash? Join our team today.

Location:

Exeter Head Office, with an on-site presence required five days per week.

Salary: £32,000 - £39,000 per annum + annual bonus + excellent benefits

Contract:

Permanent

Help protect critical services through effective cyber security governance

Are you passionate about cyber security, data governance and compliance? Do you enjoy translating complex security requirements into practical controls that make a real difference?

We're looking for an experienced Cyber Security GRC Analyst to join our growing Cyber Security team. In this role, you'll play a key part in strengthening our cyber security posture through governance, risk management and compliance activities, while helping to ensure our information assets remain protected.

A significant focus of the role will be the administration and continual improvement of Microsoft Purview, ensuring effective data protection, information governance, data classification and compliance capabilities are embedded across the organisation.

Working closely with stakeholders across IT, Legal, Audit, Procurement and the wider business, you'll help shape security practices, drive compliance initiatives and support a positive security culture.

• Administer, maintain and continuously improve Microsoft Purview capabilities.
• Support the implementation and adoption of data classification and sensitivity labelling.
• Monitor security and compliance alerts, investigate findings and coordinate remediation activities.
• Develop and maintain security policies, controls and standards.
• Produce management reporting, dashboards and compliance metrics.
• Plan, conduct and document internal ISO 27001 audits.
• Support third-party risk management and supplier security assurance activities.
• Help maintain compliance with frameworks and regulations such as ISO 27001, NIS Regulations and Cyber Essentials.
• Support information security awareness initiatives and promote a strong security culture.
• Assist in security incident investigations and remediation activities.
• Work with business stakeholders to improve information governance practices and data ownership accountability.

• Proven experience administering and optimising Microsoft Purview and Microsoft 365 security and compliance solutions.
• Strong working knowledge of Microsoft Purview capabilities, including DLP, Information Protection, Sensitivity Labels, Insider Risk Management, eDiscovery and Compliance Manager.
• Demonstrable experience supporting data governance, information protection and compliance activities within a Microsoft 365 environment.
• An understanding of cyber security risk management, governance and control frameworks.
• Knowledge of information security standards such as ISO 27001, NIS Regulations and Cyber Essentials.
• Experience producing reports, managing stakeholders and supporting audit activities.
• Strong communication skills with the ability to influence and build relationships across diverse teams.

• 5 GCSEs (or equivalent), including Maths and English.
• Educated to…