Information Security Risk and Compliance Analyst

Overview

LET’S TELL YOU MOREWe provide a critical national infrastructure to millions of customers in our region. This makes us a high-profile target for cyber-attacks on our IT systems, which if successful, could have disastrous consequences for our customers, colleagues, and the communities we serve.Our Information Security team do a wonderful job in protecting the business, its people, and customers from these daily threats, and we have an opportunity for you to join us as an

Information Security Risk and Compliance Analyst.

In this role, you’ll be key to identifying, measuring, and reporting on our Information Security Risk and Compliance position, as well as supporting gap analysis and remediation across the business.Responsibilities

You’ll be actively involved in identifying and managing Information Security risk through various methods including scoping and managing security testing as well as conducting control, vulnerability, and risk assessments. You will align this with ensuring the business meets its goals and objectives. You’ll own these assessments throughout their lifecycle, providing technical knowledge and insights to aid the risk treatment.You’ll also work with our suppliers to identify, analyse, and report on their cyber posture and deliver training to internal stakeholders. To do this, you’ll be required to have strong communication skills, being able to provide clear and concise messages.You''ll be based at our Severn Trent Centre head office in

Coventry . You’ll work within our dedicated team of

6

people. With this being such a critical role, we’re looking for someone who can join us

37 hours a week ,

working Monday to Friday .What we’re looking for

You’ll join the team with experience in Information Security and be passionate about the field, keeping up to date with emerging threats and technologies.To be successful, you’ll need experience of managing control frameworks and working within a regulated environment, with knowledge of regulatory standards such as

GDPR ,

NISR ,

PCI DSS . You should also have experience in managing Information Security risk and security testing, along with an in-depth knowledge of control frameworks and how they can be effectively applied to manage risk.You’ll need to have excellent communication skills and be able to influence decision making with internal and external stakeholders. You’ll be able to clearly articulate identified risks and negotiate an improved position which will enhance the security of Severn Trent.Skills and experience are important, but character, positivity, and a caring attitude matter too. We welcome people from all walks of life and celebrate individuality as we know diverse minds, experiences and backgrounds help us to learn and better serve our communities. We seek people who get involved, want to be part of something bigger, and make a difference because they care.How we’ll reward and care for you in return

It''s not just a job; it''s a career. We offer benefits that reward great work and award-winning training to help you reach your potential. Plus, you''ll contribute to the environment and community too. Here are some of our favourites:28 days holiday + bank holidays (and the ability to buy/ sell up to 5 days per year)Annual bonus scheme (of up to £2,225, which is subject to eligibility)Family-friendly policies (including a year off fully paid maternity and adoption leave)Leading pension scheme – we will double your contribution (up to 15% when you contribute 7.5%)Sharesave – the chance to buy Severn Trent plc shares at a discounted rateDedicated training and development with our AcademyElectric vehicle scheme and retail offersTwo paid volunteering days per yearLet’s go

We can''t wait to hear from you! Have an updated CV ready and spare five minutes to apply. We''ll let you know the outcome after the closing date, so keep an eye on your phone and ..... full job details .....