Cyber Security GRC Analyst
The advert says the job needs UK security clearance:
“Ability to successfully obtain UK Government Security Clearance (SC).”
SC clearance usually needs five years of living in the UK, and DV clearance usually needs ten. If you have lived here that long, for example on a Student and then a Graduate visa, you may be able to get it. Most people applying from outside the UK cannot, so the highest likelihood we give this job is Unlikely. Ask PENNON GROUP PLC whether they would sponsor you.
Unlikely
Sponsorship likelihood
The advert asks for security clearance
£32,000 – £39,000 / year
Salary
Below P25 for SOC 2135
£48,500
Going rate
Offer is 0.7× the going rate
This role may qualify only on a lower rate
Anyone can use the standard rate, and the pay is below it. If you are a new entrant or a PhD holder, you can use a lower rate, and the pay clears the new entrant rate. On the jobs board, Standard hides roles like this and the new entrant rate shows them as Possible at most. The advertised pay goes up to £39,000.
New graduate or PhD holder? Pick one of the lower rates.
What each route needs for this job
| Occupation code | New entrant 70% of going rate | STEM PhD 80% of going rate | Relevant PhD 90% of going rate | Standard rate 100% of going rate |
|---|---|---|---|---|
2135 Cyber security professionals Most likely code | £34,000 Clears | £38,800 Clears | £43,700 Misses | £48,500 Misses |
2482 Quality assurance and regulatory professionals Also possible | £33,800 Clears | £38,600 Clears | £43,400 Misses | £48,200 Misses |
We use the lowest threshold across the plausible codes. Likelihood is Possible at most when the pay clears only a lower rate, or only under a less likely code. A mark is for the top of the advertised pay. How the Home Office picks the code
About the role
Powered by Water, Driven by Purpose
South West Water keeps the South West flowing with safe, reliable drinking water and wastewater services across some of the UK’s most stunning landscapes.
We’re proud to be part of Pennon Group, a leader in the UK water sector, working towards a greener future. Our goals? As well as lowering our carbon footprint, we’re working with partners to plant 300,000 trees, restore peatlands and supporting farmers and landowners to improve water quality and wildlife.
Whether you’re starting out or seeking a new challenge, our scale and ambition create opportunities for you to shape your own career.
Ready to make a splash? Join our team today.
Cyber Security GRC Analyst
Location: Exeter Head Office, with an on-site presence required five days per week.
Salary: £32,000 - £39,000 per annum + annual bonus + excellent benefits
Contract: Permanent
Are you passionate about cyber security, data governance and compliance? Do you enjoy translating complex security requirements into practical controls that make a real difference?
We're looking for an experienced Cyber Security GRC Analyst to join our growing Cyber Security team. In this role, you'll play a key part in strengthening our cyber security posture through governance, risk management and compliance activities, while helping to ensure our information assets remain protected.
A significant focus of the role will be the administration and continual improvement of Microsoft Purview, ensuring effective data protection, information governance, data classification and compliance capabilities are embedded across the organisation.
Working closely with stakeholders across IT, Legal, Audit, Procurement and the wider business, you'll help shape security practices, drive compliance initiatives and support a positive security culture.
As our Cyber Security GRC Analyst, you will:
Administer, maintain and continuously improve Microsoft Purview capabilities.
Support the implementation and adoption of data classification and sensitivity labelling.
Monitor security and compliance alerts, investigate findings and coordinate remediation activities.
Develop and maintain security policies, controls and standards.
Produce management reporting, dashboards and compliance metrics.
Plan, conduct and document internal ISO 27001 audits.
Support third-party risk management and supplier security assurance activities.
Help maintain compliance with frameworks and regulations such as ISO 27001, NIS Regulations and Cyber Essentials.
Support information security awareness initiatives and promote a strong security culture.
Assist in security incident investigations and remediation activities.
Work with business stakeholders to improve information governance practices and data ownership accountability.
Proven experience administering and optimising Microsoft Purview and Microsoft 365 security and compliance solutions.
Strong working knowledge of Microsoft Purview capabilities, including DLP, Information Protection, Sensitivity Labels, Insider Risk Management, eDiscovery and Compliance Manager.
Demonstrable experience supporting data governance, information protection and compliance activities within a Microsoft 365 environment.
An understanding of cyber security risk management, governance and control frameworks.
Knowledge of information security standards such as ISO 27001, NIS Regulations and Cyber Essentials.
Experience producing reports, managing stakeholders and supporting audit activities.
Strong communication skills with the ability to influence and build relationships across diverse teams.
5 GCSEs (or equivalent), including Maths and English.
Educated to degree level or able to demonstrate equivalent professional experience.
Hands-on experience of Microsoft Purview administration and optimisation.
Experience within information security, governance, risk or compliance functions.
Knowledge of recognised security frameworks such as ISO 27001, NIST or Cyber Essentials.
Ability to successfully obtain UK Government Security Clearance (SC).
This is an exciting opportunity to play a key role in protecting critical services, information assets and customer data. You'll work with modern Microsoft security and compliance technologies, support important governance and compliance initiatives, and help drive continual improvement in cyber security practices across the organisation.
If you're an experienced cyber security professional looking to apply your Microsoft Purview expertise within a governance, risk and compliance environment, we'd love to hear from you.
What's in it for You?We believe in recognising and rewarding the people who help us deliver for our customers every day. As our Cyber Security GRC Analyst, you'll enjoy:
Competitive Salary – Reflective of your skills, experience and expertise.
Annual Bonus Scheme – Rewarding both individual and business performance.
Generous Pension Scheme – Helping you save for the future.
Flexible & Hybrid Working – Supporting a healthy work-life balance wherever possible.
Generous Annual Leave Allowance – Giving you time to recharge and spend time doing what matters most.
Holiday Buy & Sell Scheme – Providing additional flexibility to tailor your annual leave to suit your lifestyle.
Employee Assistance Programme – Providing confidential wellbeing support whenever you need it.
Exclusive Employee Discounts – Access to a range of offers, discounts and benefits.
A Collaborative Team Environment – Work alongside experienced professionals who are committed to supporting your success.
Closing Date: 30th October 2026
We may close this vacancy early if we receive a high volume of applications. We encourage you to apply as soon as possible.
Please note that the successful candidate will be subject to a mandatory DBS check as part of the onboarding process.
Be yourself, we like it that way. Together, we will build a culture of belonging, where inclusion is instinctive. Diversity is our strength and a reflection of our communities. We care, we value everyone, we celebrate uniqueness.
Our core values, which are essential to our success, are:
Be Rock Solid - Build trust and be trusted. Be the one we all look to and can depend on.
Be You - We want you to bring your best everyday. Be yourself and make your mark in your individual way.
Be the Future - Embrace change. Drive Progress. Own the challenge.
This description is the source posting as it read when we added it. We are not affiliated with PENNON GROUP PLC, so check their own site for the current details.
Where this offer sits in the market
Cyber security professionals (SOC 2135) · UK · ONS ASHE 2025 · basic pay · ~30k in sample- Offer £32,000–39,000
- Middle half £43,680–69,316
- Median £51,376
- Going rate £48,500
- Threshold £41,700
- New entrant £34,000–43,700
The range stops at £39,000, below the market's 25th percentile. That is the bottom quarter of UK pay for this occupation.
This pay misses the £48,500 standard floor, but clears the £34,000 new entrant rate.
Similar sponsored roles
See all UK visa jobsAbout sponsorship for this role
Does this job guarantee visa sponsorship?
Not necessarily. PENNON GROUP PLC holds a sponsor licence, but sponsorship for a specific hire is always the employer's decision. Be upfront in your application that you'll require it.
What salary is needed for this role to be eligible?
The offer must clear both the general threshold and the SOC 2135 going rate of £48,500. New-entrant and shortage discounts can lower it.