About this role

Job Requisition Number
9452

Work Type
Permanent

Job Function
Finance

Salary Range
£42,786.00 -£48,912.00

Base
South East Hub

Closing Date

Wednesday 18th November 2026 - 23:59

The Cyber Security Supply Chain Analyst will support the management of cyber security risk across the organisation, with a particular focus on risks arising from third‑party suppliers and the supply chain. The role will work closely with the Cyber Security Risk & Governance Manager, supporting supplier assurance activities, maintaining accurate risk documentation, and contributing to wider cyber security governance, audit, and compliance activities

Responsibilities:

- Lead with the onboarding and periodic re‑assessment of suppliers, ensuring cyber security due diligence is completed in line with DCWW risk management framework and risk appetite.

- Maintain accurate and up‑to‑date records of supplier cyber risk assessments, issues, and remediation actions, contributing to central risk registers and assurance tooling.

- Support the analysis and articulation of supply chain cyber risks, translating technical and assurance findings into clear risk statements for business owners and senior stakeholders.

- Work collaboratively with Procurement, Legal, Contract Managers, and Business Owners to ensure security requirements are appropriately reflected in sourcing, contracting, and supplier management activities.

- Monitor supplier remediation plans, track progress against agreed actions and escalate overdue or high‑risk issues in line with governance processes.

- Support the development, maintenance, and consistent application of supply chain cyber security policies, standards, and guidance.

- Contribute to cyber governance and compliance activities, including preparation and coordination of responses to internal audit, external audit, and regulatory requests.

- Maintain cyber risk registers, ensuring risks are accurately documented, consistently assessed and reviewed.

- Contribute to the tracking and monitoring of risk treatment plans, ensuring actions are recorded, progressed, and reported.

- Support the preparation of cyber risk reporting for governance forums, risk committees, and senior management.

- Act as a point of support for wider Cyber Risk and Governance activities, contributing to continuous improvement of processes, templates, and reporting where appropriate.

Essential Qualifications, Experience & Skills

- Recognised professional certification such as; CISSP, CISM, CISA, CRISC

- Experience and understanding of security governance frameworks and security risk management.

- Good familiarity with the NIST Cybersecurity Framework, CIS Critical Security controls, and ISO27001.

- Experience of engaging consultatively and openly with internal & external stakeholders to ensure good collaboration and positive working relationships

- Strong technology grounding – familiarity with its implementation and use within the corporate environment, and the potential vulnerabilities that could arise

- Enthusiastic about putting our customers first every day

- Effective communicator with strong written and verbal communication skills – capable of writing clear concise reports and presenting to senior stakeholder groups

- Demonstrable security risk management knowledge and experience

- Wide ranging knowledge of information security and IT security frameworks (NIST CSF, CIS Critical Security Controls, ISO27001 etc.), standards and application of Security best practice

Good to know

- If you would like further information on this role, please contact [email protected]

Benefits

As well as a market competitive salary, 34 days annual leave (pro rata, including public holidays), we offer a range of employee benefits and rewards including:

Variable pay schemes (your salary band will remain the same, but performance depending, you could receive an incremental within-band increase and a yearly incentive)
Option to buy additional annual leave up to 5 days per year
Enhanced employer pension contributions – Up to 11% employer contributions
Free Mortgage Brokering Services
Enhanced family friendly policies
Progression opportunities, including the ability to apply for funded training and coaching and mentoring programmes
Gym and fitness discounts as well as high street shopping
Cycle to work scheme
Discount off all Welsh Water visitor attraction centres and gift shops
Car-leasing scheme and free on-site parking at all sites
Health CashBack scheme and access to an online GP service
An employee assistance programme for employees and their immediate family
Many more can be found on our website.

Due to the nature of the industry, we require satisfactory references, post offer medical clearance, and a criminal records Basic Disclosure check on all new employees joining the business.

For some roles there may be additional checks and security clearance required, and this offer is subject to all checks being satisfied. You will receive further information on how to complete these checks via email once you have accepted this offer.

Who we are

Dŵr Cymru Welsh Water keep 3 million people healthy each day with safe, reliable water, and take away wastewater to clean, before returning it safely to our beautiful rivers and seas.

To be able to deliver high quality, essential services which help to protect the health of our customers, colleagues and our environment, we need the right people to deliver on our vision. This is achieved by living our core values and demonstrating the core behaviours that underpin them. The security of our people, assets and information is key to us, so we are looking for people who understand and comply with the company’s required security objectives.

We know that the most successful teams are the most diverse teams. Equality, diversity and inclusion provide the very foundation to our culture at Welsh Water. We want every individual to feel confident, proud and able to bring their whole selves to work.

To ensure an improved representation in our workforce, applications are particularly welcome from minority groups including Black, Asian and Minority Ethnic people, Females, LGBT+, Non-binary and people with disabilities. Together we continue to build a workplace that not only celebrates the diverse voices of our colleagues but also represents each customer we serve.

In essence, ours is a company based on trust, openness, respect, commitment and honesty. A company that our colleagues are proud to work for.

Dŵr Cymru Cyf, a limited company registered in Wales No. 2366777. Registered office: Linea, Fortran Road, St. Mellons, Cardiff CF3 0LT