Chief Information Security Officer (Chief Security Officer)

Chief Information Security Officer (Chief Security Officer)

United Utilities

Safeguarding Critical National Infrastructure. Protecting Millions of Customers. Shaping the Future of Security.

United Utilities is one of the UK's leading providers of water and wastewater services, serving more than seven million people across the North West of England. As we continue to invest in the resilience, security and digital transformation of our business, we are seeking an exceptional Chief Information Security Officer (CISO) / Chief Security Officer (CSO) to provide strategic leadership across cyber, information, operational technology and physical security.

Reporting directly to the Customer Service and Technology Director, this Executive leadership role will be responsible for defining and delivering a holistic security strategy that protects one of the UK's most important critical national infrastructure organisations.

This is a rare opportunity to influence security at the highest levels of a FTSE-listed business, shaping board-level decision making, regulatory engagement and industry-wide security practices.

The Role

As Chief Security Officer, you will lead United Utilities' enterprise-wide security agenda, ensuring the confidentiality, integrity, resilience and availability of our information, technology, operational assets and physical infrastructure.

You will serve as the organisation's foremost authority on security risk, providing trusted advice to the Executive Team and Board, whilst building strong partnerships with regulators, government agencies, sector bodies and industry peers.

You will oversee both Information Technology (IT) and Operational Technology (OT) security, championing a security-first culture across the organisation and ensuring compliance with evolving regulatory and industry requirements, including Network and Information Systems (NIS) obligations and security assurance frameworks.

A highly visible and influential leader, you will act as United Utilities' senior representative on security matters, engaging externally with bodies such as the National Cyber Security Centre (NCSC), Drinking Water Inspectorate (DWI), Water UK and other key stakeholders.

Key Responsibilities

Strategic Leadership

• Define and deliver United Utilities' cyber, information and physical security strategy.
• Provide authoritative advice and challenge to Executive and Board stakeholders on emerging threats, risks and opportunities.
• Lead security governance, risk and compliance across the enterprise.
• Develop a culture where security is embedded into decision-making, operations and customer service delivery.
• Ensure the organisation remains resilient against evolving cyber and physical security threats.

Security Governance & Risk

• Lead enterprise-wide security risk management across IT, OT and physical environments.
• Oversee security policy, standards, assurance frameworks and compliance programmes.
• Ensure alignment with regulatory obligations, industry standards and best practice.
• Chair the Security Steering Group and drive a coordinated approach to risk mitigation across the business.

Incident Management & Resilience

• Serve as the executive lead for cyber and security incident preparedness and response.
• Own and continuously develop United Utilities' Cyber Security Incident Response capability.
• Provide leadership and assurance during significant security events, engaging with regulators, government agencies and senior stakeholders as required.

External Leadership & Stakeholder Engagement

• Build and maintain strong relationships with regulators, industry bodies and government agencies.
• Represent United Utilities within industry working groups and sector forums.
• Protect and enhance the organisation's reputation through proactive engagement and thought leadership on security matters.

People Leadership

• Lead and develop high-performing teams across security governance, assurance and operational security functions.
• Foster an inclusive and performance-driven culture where colleagues are empowered to succeed.
• Build organisational capability through security awareness, education and engagement initiatives.

About You

We are looking for a proven executive security leader with the credibility, expertise and presence to operate effectively at Board level and within complex regulated environments.

You will bring:

• Significant experience leading enterprise cyber security programmes within a large, complex organisation.
• Deep expertise in information security, operational technology security and enterprise risk management.
• A strong track record of influencing Boards, Executive Teams and senior decision-makers.
• Experience engaging with regulators, government agencies and external assurance bodies.
• Demonstrable success developing and implementing security strategies that balance risk, resilience and business outcomes.
• Strong commercial acumen and experience managing budgets, suppliers and strategic partnerships.
• Outstanding stakeholder management, communication and influencing skills.
• The gravitas to challenge constructively, shape strategic thinking and drive organisational change.

Qualifications & Professional Credentials

• Degree qualified or equivalent professional experience.
• CISSP, CISM, CRISC or equivalent recognised security qualification preferred.
• Extensive experience operating within regulated, critical infrastructure or highly complex environments is desirable.

Why United Utilities?

At United Utilities, security is fundamental to protecting essential services that millions of people rely upon every day.

This role offers the opportunity to

• Influence security strategy at Board and Executive level.
• Protect critical national infrastructure and essential public services.
• Lead engagement with regulators, government and industry bodies.
• Shape the future security posture of one of the UK's most important utility organisations.
• Build, inspire and develop high-performing security teams.
• Make a lasting impact on customers, communities and the environment.

As part of our recruitment process, candidates may be asked to complete conflict of interest declarations and, for certain senior roles, enhanced pre-employment due diligence checks.

If you are a strategic security leader with the vision, expertise and influence to help safeguard critical infrastructure in an increasingly complex threat landscape, we would welcome your application.

United Utilities is committed to creating a diverse and inclusive workplace. We encourage applications from all backgrounds and communities.