Cyber & Information Security Analyst

Yorkshire Water
Bradford
7 months ago
Applications closed

Related Jobs

View all jobs

CyberSecurity – Operations Engineer – Graduates Considered

CyberSecurity Operations Engineer – Graduates Considered

Cyber Security Analyst

Cyber Security Analyst - Training Course

CYBER SECURITY ANALYST | SECURITY OPERATIONS CENTRE (SOC)

Senior Security Analyst

Company description:
Water Utility Company based in Yorkshire region of England.
Job description:
Cyber & Information Security Analyst
Hello! Thanks for stopping by. Let us tell you about all the great reasons to join us here at Yorkshire Water:
We offer a competitive salary, depending on experience

(£36,538 - £45,673)
Annual incentive related bonus (£1000 maximum bonus opportunity for the performance year)
Attractive pension scheme

(up to 12% company contribution)
Development opportunities in line with the

Cyber & Information Security Analyst

progression plan
25 days annual leave plus bank holidays

plus an extra wellness day!
Life assurance cover of 4 times pensionable salary
A great benefits package

choose from health cash plan scheme, critical illness insurance, dental insurance, life assurance flex and partner cover.
Retail savings scheme
Online GP service, cycle to work scheme, gym membership discounts and many more!
Location: Buttershaw / Hybrid Working (1-2 days in the office a week

Bradford)
Work type: Permanent. 37 hours per week, Monday

Friday. There will also be a periodic requirement to act as Standby on-call.
We have an exciting opportunity for a

Cyber & Information Security Analyst

to join the Tech team at Yorkshire Water and be a part of helping Yorkshire Water to provide the best service to our customers. Could this be you?
What we do:
Everyone has an idea of what a water company does. Here in Yorkshire, we make sure that over 5.4 million people living in the region and the millions of people who visit our region each year, can rely on our services, and have clean and safe drinking water on tap and that their wastewater is taken away. But for us, its so much more than this.
We look after communities, protect the environment, and plan to look after Yorkshires water, today, tomorrow 24/7, 365 days a year. We provide essential water and wastewater services to every corner of the Yorkshire region, and play a key role in the regions health, wellbeing, and prosperity.
New environmental legislation, unprecedented levels of investment and changing expectations from customers means that this is an exciting time to discover opportunities within the water industry. The Tech function is a key part of how we plan to meet the changing expectations of customers and regulators.
The Yorkshire Water Cyber Security Team - where protecting critical infrastructure meets camaraderie and curiosity!
We're a dynamic crew of professionals who blend technical wizardry with real-world vigilance to keep our systems safe. We have a varied range of skillsets in our team including Security Operations, intrusion detection, vulnerability scanning, advanced threat protection, Operational Technology, Physical Security and Governance Risk and Compliance specialists to name but a few.
We cover every angle of digital defence. Whether you're decoding threat intel, crafting policy, leading tabletop exercises, or crafting clever security awareness campaigns, there's never a dull moment here. Youll be exposed to leading cyber security technologies & practices in an environment where your opinion matters and you have real freedom to approach problems your own way.
Were a team that thrives on collaboration, learning, and a bit of fun. We celebrate wins together. And yes, weve debated the realism of hacking scenes in Wargames & Mr Robot. If youre wondering, our office isn't in the basement, and we dont regularly wear hoodies and sunglasses (in the office). So, if you're ready to join a team thats professional, sharp, friendly and supportive, come, join us and lets make Yorkshire Water safer together.
Where you fit in:
As a

Cyber & Information Security Analyst

you will:
Advise on security strategies to manage risks and ensure compliance with standards
Contribute to the development of security policies, standards, and guidelines
Conduct vulnerability assessments, risk analysis, and system accreditation
Investigate major security breaches and recommend control improvements
Select and apply appropriate penetration testing approaches; provide expert advice and reporting
Lead vulnerability assessment activities and recommend tools, actions, and controls
Perform risk assessments, identify mitigation strategies, and report findings
Support compliance with information and cyber-physical security regulations
Monitor and report on the effectiveness of security controls
Recommend actions to address risks related to data and cyber-physical systems
Maintain and improve operational security processes and respond to support requests
Provide guidance on technical and procedural security for digital and physical assets
Investigate security incidents and support implementation of corrective actions
Support information and cyber-physical asset management and classification
What skills & qualifications you will need:
Relevant experience in the Cyber Security field or be able to demonstrate an interest in cyber security.
Possess or be able to attain UK Government Security Check. Yorkshire Water will initiate this check if you are successful. More information on the things you will be asked about can be found here
Relevant experience and ability. We will also consider non-Cyber related experience.
Ability to work with stakeholders from different teams in Tech and the wider business
Able to explain complex cyber security information to non-technical colleagues.
You will also benefit from having:
Relevant industry recognised Cyber Security qualification and / or a degree in Information Security or Cyber Security
Knowledge of information security frameworks & standards.
Previous experience in cyber / information security roles.
Experience in information security incident response & investigations.
A good knowledge of General Data Protection regulations (UK-GDPR)
Experience working with legal, audit and compliance teams.
Penetration testing support.
Risk assessment (including supplier risk assessment), control recommendation, mitigation and remediation.
On call Requirement:
There will be an element of compensated periodic on-call in this roll. Once you are settled in role, you will join the on-call standby rota. Because the bad guys never sleep.Although we operate 24 hours a day, 365 days a year, its important to us that we support flexible working patterns and job share options (when we can), to help you make the best of both your work and home life. We know that juggling childcare responsibilities or getting that ideal work/life balance isnt always easy!
Do we sound like your cup of tea?
If youve got experience in Cyber & Information Security and want to help us deliver great service for our customers whilst looking after the environment, then be sure to apply today to find out what a career with Yorkshire Water can offer you.
If successful for the role, you will be required to undergo pre-employment checks that will include a Basic Disclosure Check, carried out through a Third-Party Company, prior to commencing employment. You will also be required to go through the security vetting process for a Security Check clearance.
All our roles are subject to a medical questionnaire, and further medicals when required.
We are committed to removing barriers and ensuring our recruitment process is accessible to everyone. We offer a range of adjustments to make your application experience as comfortable and straightforward as possible.
If you have an accessibility need, disability, or condition that requires changes to the recruitment process, please include this information in your application. We will then discuss any reasonable adjustments required.
Kelda Group reserve the right to close this position before the published closing date, should the need occur. We therefore advise that you complete and submit your application as soon as possible.
Closing date for this role is 8th September 2025
No agencies please.

TPBN1_UKTJ

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Penetration Tester Jobs in the UK: What Employers Actually Want in 2026

The demand for skilled professionals in cyber security has never been higher, and penetration testers sit at the very heart of this rapidly evolving industry. As organisations across the UK continue to digitise their operations, protect sensitive data, and defend against increasingly sophisticated threats, the need for ethical hackers has grown dramatically. If you are considering a career in this field—or looking to advance within it—it is essential to understand what employers are really looking for in 2026. This guide breaks down the current expectations, required skills, certifications, and practical experience that can help you stand out in a competitive job market.

SOC Analyst Jobs UK 2026: Salaries, Skills & How to Get Hired

Cyber security is one of the UK's fastest-growing career paths — and SOC analyst is where most people begin. It's in high demand, genuinely accessible, and you don't need a degree or years of experience to get started. But knowing what UK employers actually want in 2026 — what they pay, which certs matter, and how to stand out — is a different matter. This guide covers all of it.

How Many Cyber Security Tools Do You Need to Know to Get a Cyber Security Job?

If you are trying to build or move forward in a cyber security career, it can feel like the list of tools you are expected to know never ends. One job advert asks for SIEM platforms, another mentions penetration testing tools, another lists cloud security, threat intelligence platforms, endpoint detection, scripting languages and compliance frameworks. Scroll LinkedIn and it gets worse. Everyone seems to “know” dozens of tools, certifications and platforms. Here is the reality most cyber security hiring managers agree on: they are not hiring you because you know every tool. They are hiring you because you understand risk, can think like an attacker and a defender, follow process, communicate clearly and make good decisions under pressure. Tools matter — but only when they support those outcomes. So how many cyber security tools do you actually need to know to get a job? For most job seekers, the answer is far fewer than you think. This article explains what employers really expect, which tools are essential, which are role-specific and how to focus your learning so you look credible, not overwhelmed.