Information Security Risk and Compliance Analyst

Here in Technology our mission is simple – deliver and maintain secure and stable IT services, maximising value to our business. Our teams are always interested in learning new, innovative, and exciting ways for us to aid our business colleagues, and ultimately our customers' experience. Collectively, we provide a critical national infrastructure to millions of customers in our region, making us a high-profile target for cyber-attacks on our IT systems. Our Information Security team protects the business, its people, and customers from these daily threats.

In this role, you’ll be key to identifying, measuring, and reporting on our Information Security Risk and Compliance position, as well as supporting gap analysis and remediation across the business. You’ll be actively involved in identifying and managing Information Security risk through various methods including scoping and managing security testing as well as conducting control, vulnerability, and risk assessments. You will align this with ensuring the business meets its goals and objectives.

Your key accountabilities will include:

• Identifying and managing Information Security risk, aligning with control frameworks such as NIST and CIS
• Scoping and managing security testing
• Reviewing, testing, and monitoring control effectiveness
• Maintaining the Information Security compliance framework, ensuring alignment and traceability to legal, regulatory, and corporate policy control requirements
• Liaising with our supply chain to identify, analyse, and report on their cyber posture
• Using clear communication skills to report on various KPIs across risk management and compliance obligations to appropriate Severn Trent governance groups
• Developing, maintaining, and continuously improving Information Security standards, policies, and processes
• Planning and developing Information Security training and awareness initiatives
• Collaborating across the technology department to drive continuous improvement

You’ll join the team with experience in Information Security and be passionate about the field, keeping up to date with emerging threats and technologies. To be successful, you’ll need experience of managing control frameworks and working within a regulated environment, with knowledge of regulatory standards such as GDPR, NISR, PCI DSS. You should also have experience in managing Information Security risk and security testing, along with an in-depth knowledge of control frameworks and how they can be effectively applied to manage risk.

You’ll need to have excellent communication skills and be able to influence decision making with internal and external stakeholders. We welcome people from all walks of life and celebrate individuality as we know diverse minds, experiences, and backgrounds help us to learn and better serve our communities.

Working here isn’t just a job. You can build a career at Severn Trent. We’ll reward you for it, too. We have a range of benefits that recognise great work, and award-winning training to help you reach your potential. Here are just some of our favourite perks:

• 28 days holiday + bank holidays (and the ability to buy/sell up to 5 days per year)
• Annual bonus scheme (up to £2,250 based on company performance and subject to eligibility)
• Leading pension scheme – we will double your contribution (up to 15% when you contribute 7.5%)
• Sharesave – the chance to buy Severn Trent Plc shares at a discounted rate
• Dedicated training and development with our Academy
• Electric vehicle scheme and retail offers
• Family friendly policies
• Two paid volunteering days per year

We can’t wait to hear from you. Before you apply, you’ll need an updated copy of your CV and about five minutes to spare. If your curiosity has been piqued and you’re wanting to find out even more, search #LifeAtSevernTrent on social media.