Location
Hybrid – Hampton Coal Wharf, London.

Hours
36 hours, Monday to Friday.

Salary
Up to £75,000 per annum, depending on experience.

About the Role
We are looking for a security-focused, results-oriented individual who thrives in a collaborative, team-focused culture. You will work closely with IT and OT network managers, suppliers, business stakeholders, service owners, and your team to ensure the delivery of secure, reliable, and resilient network services across Thames Water. As a Network Security Lead, you will lead and manage the end-to-end BAU (Business As Usual) service delivery for network security across Operational Technology (OT) and Information Technology (IT). You will be responsible for maintaining robust security controls, managing suppliers, mitigating operational risk, and ensuring compliance with industry standards to protect Thames Water’s critical infrastructure.

What you’ll do as a Network Security Lead:
Network Security Management:
- Maintain oversight of IT and OT network systems, including VPNs, SDWAN, and firewalls.
- Ensure all network security services are fit for purpose and aligned with business outcomes.
- Approve and manage all changes affecting the network threat surface.
Governance & Compliance:
- Ensure network environments comply with regulatory obligations (NIST, CAF, etc.).
- Apply cybersecurity standards and maintain systems according to approved design.
Service Delivery & Operations:
- Lead key service management processes (Continuity, Capacity, Availability).
- Attend incident/problem bridges as the subject matter expert.
- Review root cause analyses (RCAs) and oversee corrective actions.
- Provide accurate monthly service performance reports across IT and OT.
Supplier & Financial Management:
- Lead and manage suppliers to meet agreed SLAs and KPIs.
- Ensure robust contractual requirements are in place for quality service delivery.
- Own and manage a £2M technical cost centre, driving efficiency and cost containment.
- Support the integration of £140M capital schemes into BAU operations.
Risk & Change Management:
- Collaborate with the Operational Risk Manager to identify, mitigate, and report on network-related risks.
- Ensure all risk KPIs and improvement criteria are met.
Leadership & Strategy:
- Lead and mentor a team of four security network engineers.
- Foster a collaborative culture aligned with the CTO’s technology strategy.
- Support programme delivery while safeguarding operational environments.
- Develop and execute sourcing strategies for sustainable service delivery.
Collaboration & Continuous Improvement:
- Serve as the single point of contact for business and supplier stakeholders.
- Define and monitor SLAs, holding partners accountable for delivery.
- Drive continuous service improvement initiatives and manage CMDB updates.

Essential Experience
- Ability to gain SC Clearance.
- IT and OT network security experience.
- Strong interpersonal skills and stakeholder engagement capability.
- Proven problem-solving and decision-making skills.
- Experience with delivery methodologies (ITIL, waterfall, agile, lean).
- Ability to explain complex network issues simply and effectively.

Essential Technical Skills & Qualifications
- CCNP, CCNA or equivalent experience; CheckPoint CCSE, CCSA or equivalent experience.
- Proficiency in Layer 2/3 technologies (VLAN, RSTP, BGP, MRP) across vendors (Cisco, Meraki, Belden, Fortinet).
- Experience with network edge security (SDWAN, IPSEC) using tools like Cisco ISE, CheckPoint, and Umbrella.
- Higher education qualification or equivalent experience in engineering.
- Skills in stakeholder management, communication, and strategic decision-making.

Desirable Experience
- Previous experience in utilities or large-scale enterprises (20,000+ devices).
- Commercial acumen and change management experience.
- Ability to simplify complex network architecture for non-technical audiences.

Desirable Technical Skills & Qualifications
- Knowledge of network security technologies and strategic supplier management.
- Experience in stakeholder analysis and business case development.
- Familiarity with cloud integration (Azure and AWS).