Cyber Security GRC Analyst

Powered by Water, Driven by Purpose South West Water keeps the South West flowing with safe, reliable drinking water and wastewater services across some of the UK's most stunning landscapes. We're proud to be part of Pennon Group, a leader in the UK water sector, working towards a greener future.

Our goals? As well as lowering our carbon footprint, we're working with partners to plant 300,000 trees, restore peatlands and supporting farmers and landowners to improve water quality and wildlife. Whether you're starting out or seeking a new challenge, our scale and ambition create opportunities for you to shape your own career.

Ready to make a splash? Join our team today. Cyber Security GRC Analyst Location: Exeter Head Office, with an on-site presence required five days per week. Salary: £32,000 - £39,000 per annum + annual bonus + excellent benefits Contract: Permanent Help protect critical services through effective cyber security governance Are you passionate about cyber security, data governance and compliance?

Do you enjoy translating complex security requirements into practical controls that make a real difference? We're looking for an experienced Cyber Security GRC Analyst to join our growing Cyber Security team. In this role, you'll play a key part in strengthening our cyber security posture through governance, risk management and compliance activities, while helping to ensure our information assets remain protected.

A significant focus of the role will be the administration and continual improvement of Microsoft Purview, ensuring effective data protection, information governance, data classification and compliance capabilities are embedded across the organisation.

Working closely with stakeholders across IT, Legal, Audit, Procurement and the wider business, you'll help shape security practices, drive compliance initiatives and support a positive security culture. What you'll be doing As our Cyber Security GRC Analyst,

you will

Administer, maintain and continuously improve Microsoft Purview capabilities. Support the implementation and adoption of data classification and sensitivity labelling. Monitor security and compliance alerts, investigate findings and coordinate remediation activities.

Develop and maintain security policies, controls and standards. Produce management reporting, dashboards and compliance metrics. Plan, conduct and document internal ISO 27001 audits. Support third-party risk management and supplier security assurance activities.

Help maintain compliance with frameworks and regulations such as ISO 27001, NIS Regulations and Cyber Essentials. Support information security awareness initiatives and promote a strong...

Report this job