Information Security Risk and Compliance Associate

Severn Trent Plc; Coventry; Hybrid; GBP 30,000 - 50,000; Full time

Job summary

A leading utility company in the UK is seeking an Information Security Risk and Compliance Associate to join their team in Coventry. This role involves identifying and managing Information Security risks, performing assessments, and ensuring compliance with regulatory standards. The ideal candidate will have experience in Information Security management and strong communication skills to work effectively with both internal and external stakeholders. Benefits include 25 days of holiday, a competitive pension scheme, and professional training opportunities.

Benefits

25 days holiday + bank holidays

Annual bonus scheme

Family-friendly policies

Leading pension scheme

Sharesave scheme

Dedicated training and development

Electric vehicle scheme

Two paid volunteering days

Qualifications

• Experience in managing Information Security risk and control frameworks.
• Knowledge of regulatory standards such as GDPR, NISR, PCI DSS.
• Excellent communication skills to influence stakeholders.

Responsibilities

• Identify, measure, and report on Information Security Risk and Compliance.
• Manage security testing and conduct control and vulnerability assessments.
• Work with suppliers to assess and report on their cyber posture.

Skills

Information Security management

Regulatory compliance knowledge

Risk assessment

Control frameworks management

Strong communication skills

Job description

Information Security Risk and Compliance Associate

LET’S CUT STRAIGHT TO IT

At Severn Trent, our people are at the heart of everything we do. We’re in the top 5% of utility companies worldwide when it comes to employee engagement and ranked as a Top 50 UK Employer on Glassdoor. Join us in making a positive impact on the environment and our communities, while being valued and supported in a truly inclusive workplace.

If you want to do more, because you care, we want you on our team.

LET’S TELL YOU MORE

We provide a critical national infrastructure to millions of customers in our region. This makes us a high-profile target for cyber-attacks on our IT systems, which if successful, could have disastrous consequences for our customers, colleagues, and the communities we serve.

Our Information Security team do a wonderful job in protecting the business, its people, and customers from these daily threats, and we have an opportunity for you to join us as anInformation Security Risk and Compliance Associate.In this role, you’ll be key to identifying, measuring, and reporting on our Information Security Risk and Compliance position, as well as supporting gap analysis and remediation across the business.

You’ll be actively involved in identifying and managing Information Security risk through various methods including scoping and managing security testing as well as conducting control, vulnerability, and risk assessments. You will align this with ensuring the business meets its goals and objectives. You’ll own these assessments throughout their lifecycle, providing technical knowledge and insights to aid the risk treatment.

You’ll also work with our suppliers to identify, analyse, and report on their cyber posture and deliver training to internal stakeholders. To do this, you’ll be required to have strong communication skills, being able to provide clear and concise messages.

You’ll be based at our Severn Trent Centre head officeinCoventry. You’ll work within our dedicated team of 6 people.With this being such a critical role, we’re looking for someone who can join us37 hours a week,working Monday to Friday.

HOW WE WORK

You’ll join a caring culture that collaborates to achieve, grow, and develop. Our employee engagement scores are among the highest globally in energy and utilities. That’s why, we value in-person moments to keep our culture alive but also understand the flexibility working from home can bring. So, you'll usually find us in the office, but working from home is supported, when you need it.

WHAT WE’RE LOOKING FOR

You’ll join the team with experience in Information Security and be passionate about the field, keeping up to date with emerging threats and technologies.

To be successful, you’ll need experience of managing control frameworks and working within a regulated environment, with knowledge of regulatory standards such as GDPR, NISR, PCI DSS. You should also have experience in managing Information Security risk and security testing, along with an in-depth knowledge of control frameworks and how they can be effectively applied to manage risk.

You’ll need to have excellent communication skills and be able to influence decision making with internal and external stakeholders. You’ll be able to clearly articulate identified risks and negotiate an improved position which will enhance the security of Severn Trent.

Skills and experience are important, but character, positivity, and a caring attitude matter too. We welcome people from all walks of life and celebrate individuality as we know diverse minds, experiences and backgrounds help us to learn and better serve our communities. We seek people who get involved, want to be part of something bigger, and make a difference because they care.

HOW WE’LL REWARD AND CARE FOR YOU IN RETURN

It's not just a job; it's a career. We offer benefits that reward great work and award-winning training to help you reach your potential. Plus, you'll contribute to the environment and community too. Here are some of our favourites:

• 25 days holiday + bank holidays (and the ability to buy/ sell up to 5 days per year)
• Annual bonus scheme (of up to £1,500, which is subject to eligibility)
• Family-friendly policies (including a year off fully paid maternity and adoption leave)
• Leading pension scheme – we will double your contribution (up to 15% when you contribute 7.5%)
• Sharesave – the chance to buy Severn Trent plc shares at a discounted rate
• Dedicated training and development with our Academy
• Electric vehicle scheme and retail offers
• Two paid volunteering days per year

LET’S GO

We can't wait to hear from you! Have an updated CV ready and spare five minutes to apply. We'll let you know the outcome after the closing date, so keep an eye on your phone and emails.