Strengthening cyber resilience to protect our people, customers, and environment. This role will sit within our Cyber Architecture team, ensuring secure design and strategic decision-making. You will collaborate closely with architects and engineers to embed security principles and policies into new systems and services, ensuring robust, scalable, and secure solutions across both IT and OT environments. You will contribute to the creation and management of a cyber security roadmap, ensuring Anglian Water remains resilient to threats. The Cyber Security Analyst is a pivotal member of the cyber security team, responsible for translating the organisation’s cyber security strategy into effective protection across both IT and OT environments. Working across multiple domains—including Governance, Risk & Compliance (GRC), Security Operations (SecOps), Architecture, and Identity—the analyst will be deployed into a specific function based on organisational needs and emerging threats. Over time, analysts will have the opportunity to rotate between these domains to develop broad and well-rounded cyber security expertise. As a primary operational resource, the Cyber Security Analyst plays a key role in delivering day-to-day security activities, supporting incident response, assessing risks, and operating technical controls. The role also contributes to the secure design and implementation of new systems and services, ensuring the organisation maintains a strong security posture. This is a diverse and hands-on position, offering exposure to a wide range of security activities across both operational technology (OT) and information technology (IT) environments. Success in the role requires a strong technical foundation, analytical thinking, and a collaborative mindset, as the analyst will work closely with colleagues across IT, OT, and wider business functions. Whether managing security controls, supporting audits and compliance reviews, or influencing secure architecture decisions, the Cyber Security Analyst will play a central role in strengthening the organisation’s cyber resilience and maturity.