Southern Water
Cyber Risk & Assurance Analyst
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Closing Date: 2026-08-28
Job Title: Cyber Risk & Assurance Analyst
Location: Durrington / Hybrid
Contract Type: Permanent
Hours: 37 hours per week
Salary: from £55k
About the Role
This is a fantastic opportunity to join Southern Water’s Cyber Risk & Assurance team, the organisation’s second line of defence within the wider Cyber Security function. As a Cyber Risk & Assurance Analyst, you’ll play a central role in helping the business understand, manage and reduce cyber risk across critical operations. You’ll be responsible for developing and improving cyber risk insights in your area of specialism, driving process and tooling enhancements, and supporting stakeholders across Technology, Legal and the wider business.
This is a role for someone who enjoys tackling complex problems, breaking them down into actionable solutions, and collaborating with a wide range of experts. You’ll also act as a trusted advisor helping colleagues understand cyber threats, risks and controls, and supporting the wider team in embedding strong cyber risk management practices across Southern Water.
What You Will Be Responsible For
- Conduct complex cyber risk assessments
- Strengthen key controls
- Deliver clear risk insights
- Drive improvements across cyber domains
- Build collaborative relationships across Technology, Security, Legal and the business
Key Responsibilities
- Maintain an up-to-date understanding of the cyber threat landscape, relevant regulations (including NIS1/NIS2 and GDPR), and emerging risks.
- Lead, plan and perform complex cyber risk assessments aligned to industry-recognised frameworks, testing the design and effectiveness of cyber controls.
- Produce high-quality risk assessment reports with clear, actionable conclusions that support timely risk-based decision-making.
- Identify and deliver improvements across domains such as identity & access management, application security, endpoint security, and network security.
- Work closely with stakeholders across Security, Technology, Legal, Internal Audit and the wider business to assess control gaps, prioritise remediation actions and track progress to completion.
- Build strong working relationships across teams to influence, support and strengthen cyber risk management practices.
- Drive process improvements and enhancements across the Cyber Risk & Assurance function.
Additional Requirements Specific to the Role
- Will work closely with both technical teams and non-technical stakeholders, requiring an ability to communicate complex concepts clearly.
- Must be comfortable operating in an environment with regulatory, operational and cyber security obligations.
- Occasional engagement with internal or external audit teams may be required.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What You’ll Bring to the Role
Essential
- Degree-level education or equivalent experience.
- Strong knowledge of cyber security and information security control best practice.
- Proven experience in cyber security, risk management or security assessment (5+ years, or advanced degree with 3+ years).
- In-depth understanding of key frameworks such as NIST (800-37, 800-30, 800-53), ISO 27001/27005, SOC 2, PCI or MITRE ATT&CK.
- Solid understanding of cloud models, application security, vulnerability and patch management.
- Experience in regulated and/or unionised environments.
- Excellent communication skills with the ability to simplify complex findings for senior management.
- Strong attention to detail and a proactive, positive, innovative mindset.
Desirable
- GRC or security certifications (e.g., CISSP, CISM, CRISC, CISA, GCFE, GSEC, CCSP).
- Experience with cyber risk modelling (e.g., CyberCube, RMS, Cyence).
- Hands-on experience with frameworks such as ISO 27001, NIST CSF, NCSC CAF or CIS Controls.
- Understanding of ICS/OT environments.
About Southern Water
Southern Water is at the forefront of transforming Britain’s water industry, investing significantly to enhance resilience, sustainability, and service excellence. With £7.8bn planned investment for 2025-30, this is an unparalleled opportunity to join a business committed to delivering a generational shift in the way water services are managed. You will be joining at a time of significant change, working alongside a highly skilled leadership team with a clear vision for the future.
We offer an environment where senior professionals can make a meaningful impact, influence major strategic decisions, and drive long-term value creation. At Southern Water, we believe diverse perspectives drive innovation. If you’re passionate about making a positive impact and think you can bring value to our team, we’d love to hear from you—even if you don’t tick every box. If this role isn’t quite what you’re looking for but are keen to be contacted about opportunities at Southern Water, you can register your details here: [Introduce Yourself](myworkdaysite.com- Introduce Yourself).
Our Commitment to Diversity
We welcome applicants from all backgrounds, identities, and experiences. We do not discriminate based on race, ethnicity, gender, sexual orientation, age, disability, religion, or any other protected characteristic. If you need reasonable adjustments during the recruitment process, please let us know.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Additional Information
In line with Southern Water’s security requirements, successful candidates will be required to provide evidence of their identity, eligibility to work in the UK, criminal record check (DBS) and verification of their employment and/or education history for the past three years. Appointment to this role is subject to the successful completion of all preemployment checks, including security vetting. Please note that if a candidate does not meet the required security standards or fails to pass the vetting process, Southern Water reserves the right to withdraw the offer of employment. Some positions may also require higher levels of security vetting, which may involve providing additional documentation.
#LI-HM2 #LI-Hybrid
Our Purpose
Our purpose is big. Our impact is huge. And we know that every single one of us has the power, through our actions, to positively change society and the environment for good. It’s why careers with us have real meaning. Because, if you’re driven and ambitious, we can offer you huge opportunities for personal growth, professional development and constant innovation.
Forever evolving. Forever focused on doing the right thing, we empower and encourage everyone to play to their strengths and to help us shape a fair and positive future for all. We believe in Water for Life. If you do too, Dive Right In.
Our Customers
Our customers are at the heart of everything we do, because delivering water for life is our core purpose. To achieve this, we need 24/7 support in place to resolve incidents quickly and efficiently. All our employees understand the importance of out-of-hours incident support – because when problems appear, fixing them is our top priority. That’s why our people join together and support when and however needed to make sure our customers get the service they deserve.
Joining the Southern Water family means you’ll become part of our incident support team. During your interview, your manager will speak to you about any incident support rotas that apply to your position.
Does this opportunity excite you but you’re not 100% sure if you meet all the requirements for the role? Or are you concerned that ‘normal’ office hours aren’t possible given your personal circumstances? Whilst we can’t accommodate every flexible working request, we’ll try to find a practical solution. So why not engage with us and find out more about this role?
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills