Chief Information Security Officer; Chief Security Officer
Listed on 2026-10-21
-
IT/Tech
Cybersecurity, Information Security & Data Protection, Security Management & Operations -
Security
Cybersecurity, Information Security & Data Protection, Security Management & Operations
Job number UU06720 Country United Kingdom Region Cheshire West and Chester Location name Lingley Mere (UU), Lingley Green Avenue, Great Sankey, Warrington, WA5 3LP
Posting End Date 02/11/2026 Band 2 Role Type Permanent Salary Competitive
United Utilities
Safeguarding Critical National Infrastructure. Protecting Millions of Customers. Shaping the Future of Security.
United Utilities is one of the UK's leading providers of water and wastewater services, serving more than seven million people across the North West of England. As we continue to invest in the resilience, security and digital transformation of our business, we are seeking an exceptional Chief Information Security Officer (CISO) / Chief Security Officer (CSO) to provide strategic leadership across cyber, information, operational technology and physical security.
Reporting directly to the Customer Service and Technology Director
, this Executive leadership role will be responsible for defining and delivering a holistic security strategy that protects one of the UK's most important critical national infrastructure organisations.
This is a rare opportunity to influence security at the highest levels of a FTSE-listed business, shaping board-level decision making, regulatory engagement and industry-wide security practices.
The Role
As Chief Security Officer, you will lead United Utilities' enterprise-wide security agenda, ensuring the confidentiality, integrity, resilience and availability of our information, technology, operational assets and physical infrastructure.
You will serve as the organisation's foremost authority on security risk, providing trusted advice to the Executive Team and Board, whilst building strong partnerships with regulators, government agencies, sector bodies and industry peers.
You will oversee both Information Technology (IT) and Operational Technology (OT) security, championing a security-first culture across the organisation and ensuring compliance with evolving regulatory and industry requirements, including Network and Information Systems (NIS) obligations and security assurance frameworks.
A highly visible and influential leader, you will act as United Utilities' senior representative on security matters, engaging externally with bodies such as the National Cyber Security Centre (NCSC), Drinking Water Inspectorate (DWI), Water UK and other key stakeholders.
Key ResponsibilitiesStrategic Leadership
- Define and deliver United Utilities' cyber, information and physical security strategy.
- Provide authoritative advice and challenge to Executive and Board stakeholders on emerging threats, risks and opportunities.
- Lead security governance, risk and compliance across the enterprise.
- Develop a culture where security is embedded into decision-making, operations and customer service delivery.
- Ensure the organisation remains resilient against evolving cyber and physical security threats.
Security Governance & Risk
- Lead enterprise-wide security risk management across IT, OT and physical environments.
- Oversee security policy, standards, assurance frameworks and compliance programmes.
- Ensure alignment with regulatory obligations, industry standards and best practice.
- Chair the Security Steering Group and drive a coordinated approach to risk mitigation across the business.
- Serve as the executive lead for cyber and security incident preparedness and response.
- Own and continuously develop United Utilities' Cyber Security Incident Response capability.
- Provide leadership and assurance during significant security events, engaging with regulators, government agencies and senior stakeholders as required.
External Leadership &…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).