Principal Digital Specialist; Networks and Cybersecurity

Together we are Trusted to Serve Scotland. Cyber‑Security Architect Protect Scotland’s Digital Water Future.

Scottish Water is building an increasingly connected digital water system, bringing together cloud platforms, data, applications, operational technology, telemetry, SCADA and cyber‑physical assets across the water network. We’re now looking for a talented and forward‑thinking Cyber‑Security Architect to help ensure these systems are designed, protected and operated to the highest standards of cybersecurity, resilience and trust. This role sits within the Digital Strategy, Architecture & Platforms function and reports directly to the Digital Architecture Manager.

You will shape cyber‑security architecture across our digital and operational landscape, helping to protect essential services, reduce the risk of disruption, and support safe, secure and reliable water services for Scotland.

As Cyber‑Security Architect, you will provide architectural leadership across Scottish Water’s enterprise, cloud and operational technology environments. You’ll work closely with Cyber Security, Cloud Architecture, Enterprise Architecture, Digital Platforms, Operational Technology, engineering teams and business stakeholders to ensure cyber‑security is embedded by design across our interconnected digital water ecosystem.

As a Cyber Security Architect, you will design secure digital water systems by defining cyber‑security architecture patterns, standards and guardrails for interconnected water systems, including cloud platforms, applications, networks, telemetry, SCADA and operational technology. You will ensure security is embedded from the outset so digital services are resilient, trusted and designed to minimise the likelihood and impact of operational disruption. You will play a key role in protecting cyber‑physical systems by applying recognised operational technology security principles, including IEC 62443 concepts such as zones, conduits, security levels, lifecycle security and defence‑in‑depth, to help protect our cyber‑physical water assets.

Working closely with OT, engineering and cyber‑security teams, you will help balance safety, reliability, availability and security across critical operational environments. The role will involve shaping cloud and enterprise security architecture by designing and assuring secure cloud and enterprise architectures aligned to ISO 27001 principles. This includes areas such as risk management, identity, access control, data protection, monitoring, incident response and continual improvement.

You will partner with Cloud Architects and platform teams to ensure our cloud services are secure, scalable, resilient and operationally supportable. You will provide cyber‑security assurance and governance through architectural oversight and security assurance for major digital, cloud, infrastructure and operational technology programmes. Translating cyber risks into clear design decisions, control requirements and pragmatic delivery guidance, you will support project teams and senior stakeholders while championing security‑by‑design, zero‑trust principles, secure integration, least privilege, monitoring, resilience and recovery across the technology landscape.

In addition, you will help build cyber‑security capability and culture by working collaboratively across digital, cyber, engineering and operational teams to raise awareness, improve decision‑making and embed a proactive cyber‑security culture across Scottish Water.

We're looking for someone with strong experience in cyber‑security architecture, operational technology security, cloud security, infrastructure security or a closely related discipline. You will…