Policy Support Lead

The Policy Support Analyst will be responsible for developing, implementing, and maintaining security policies, standards, and procedures to ensure the protection of our information assets. This role requires a good understanding of security frameworks and regulatory requirements. In addition, this role requires you to have experience of Information Security.  

The role will be based in Reading and will report directly to the Head of Governance, Risk and Compliance, with whom you will work to deliver the goals of the company to have a fit for purpose security standards framework. This is a role that requires the individual to be able to work independently, finds fulfilment in a challenging and fast paced environment and takes accountability to meet and drive the needs of the programme. 

What you’ll do as a Policy Support Analyst 
Security Standards Management: 

• Develop and maintain comprehensive security policies, standards and procedures across the organisation. 

• Align all standards with applicable regulatory requirements and frameworks (e.g., ISO 27001, GDPR, NIS-R). 

• Review and update standards regularly in response to emerging threats and regulatory changes. 

Governance & Compliance: 

• Oversee the exception management framework, including reporting, approvals and reviews prior to expiry. 

• Monitor compliance with security policies and standards across digital and business teams. 

• Act as the primary point of contact for internal and external audits related to security standards. 

Service Delivery & Operations: 

• Coordinate the annual standards review cycle, ensuring timely updates and stakeholder engagement. 

• Support the publication and socialisation of new or revised standards to ensure organisation wide awareness. 

• Collaborate with cross functional teams to embed security best practices into digital processes. 

Stakeholder & Communications Management: 

• Build and maintain relationships with key stakeholders including the CISO, CIO, architecture teams, programme delivery and business owners. 

• Provide clear, engaging, and relevant communication and training around security standards. 

• Deliver security messaging both in person and virtually, ensuring consistency and clarity. 

Continuous Improvement: 

• Track policy effectiveness and recommend enhancements to improve standard adoption and compliance. 

• Stay informed of the latest security regulations, technologies and industry best practices to ensure standards remain current and effective. 

Base location – Hybrid – Clearwater Court, Reading. 
Working pattern – 36 hours Monday to Friday. 

What you should bring to the role: 
Essential Experience: 

• Experience in information security or a related governance role. 

• Experience applying security frameworks and regulatory requirements (CIS, GDPR, NIS-R). 

• Experience collaborating across multiple business areas and functional teams. 

• Proven ability to work independently, with strong stakeholder management capabilities. 

Essential Technical Skills & Qualifications: 

• Strong written and verbal communication skills with the ability to deliver complex messages clearly. 

• Skilled in exception management, reporting and compliance monitoring. 

Desirable Experience: 

• Experience maintaining security standards and exception frameworks. 

• Exposure to information risk management processes and controls. 

Desirable Technical Skills & Qualifications: 

• Relevant certifications such as CISSP, CISM or CISA. 

Desirable Competencies: 

• Strong relationship building and collaboration skills. 

• Excellent organisational and time management skills. 

• Ability to influence stakeholders and drive compliance in a matrixed environment. 

What’s in it for you? 

• Competitive salary up to £60,000 per annum depending on experience 

• Annual Leave - 26 days holiday per year increasing to 30 with the length of service (plus bank holidays) 

• Generous Pension Scheme through AON 

• Access to lots of benefits to help you take care of you and your family’s health and wellbeing, and your finances – from annual health MOTs and access to physiotherapy and counselling, to Cycle to Work schemes, shopping vouchers and life assurance. 

Find out more about our benefits and perks

Who are we?
We’re the UK’s largest water and wastewater company, with more than 16 million customers relying on us every day to supply water for their taps and toilets. We want to build a better future for all, helping our customers, communities, people, and the planet to thrive. It’s a big job and we’ve got a long way to go, so we need help from passionate and skilled people, committed to making a difference and getting us to where we want to be in the years and decades to come.

Learn more about our purpose and values

Working at Thames Water
Thames Water is a unique, rewarding, and diverse place to work, where every day you can make a difference, yet no day is the same. As part of our family, you’ll enjoy fast-tracked career opportunities, flexible working arrangements and excellent benefits.

Whether you’re interested in a role in one of our call centres or science labs, we’re looking for people like you with real passion and a burning desire to make things better.

So, if you’re looking for a sustainable and successful career where you can make a daily difference to millions of people’s lives while helping to protect the world of water for future generations, we’ll be here to support you every step of the way. Together, we can build a better future for our customers, our region and our planet.

Real purpose, real support, real opportunities. Come and join the Thames Water family. Why choose us? Learn more.

Our overarching aim is to ensure that Thames Water is great, diverse, and inclusive place to work. We welcome applications from everyone and offer extra support for those who need it throughout the recruitment process. Our aim is to remove any real or perceived barriers to success, so if you need assistance, we’re here to help and support.

When a crisis happens, we all rally around to support our customers. As part of Team Thames, you’ll have the opportunity to sign up to support our customers on the frontline as an ambassador. Full training will be given for what is undoubtedly an incredibly rewarding experience. It’s also a great opportunity to learn more about our business and meet colleagues.

Disclaimer: due to the high volume of applications we receive, we may close the advert earlier than the advertised date, so we encourage you to apply as soon as possible to avoid disappointment.