IT Apprenticeship (

The Apprentice IT Security Analyst will support the IT Security and Compliance function across a balanced mix of technical cyber security and governance, risk and compliance activities. The role provides structured workplace learning and practical experience while contributing to security monitoring, vulnerability and control assurance, the Information Security Management System, audit support and compliance reporting.

Working under appropriate supervision, the postholder will progressively develop the knowledge, judgement and practical skills needed to investigate routine security matters, maintain accurate evidence, support risk-based decisions and communicate with technical and business stakeholders. Responsibility will increase as competence is demonstrated.

Perks you'll enjoy

Earn while you learn with a salary of £15,500
Fully funded for those aged 16-24
Real-world business experience with valuable transferable skills
Monday to Friday working schedule, so your weekends are all yours

What you'll be doing

Technical security operations

Review and triage security alerts across endpoint, identity, email, cloud and network security platforms, escalating suspected incidents promptly.
Gather and preserve information for security investigations, maintain accurate case records and support actions through to documented closure.
Assist with vulnerability reviews, affected-asset validation, remediation tracking and verification of completed actions.
Support control checks covering access, privileged accounts, endpoint protection, logging, patching, email security and secure configuration.
Help maintain security tools, operational procedures and incident-response playbooks.

Governance, risk and compliance

Support the maintenance and continual improvement of the Information Security Management System.
Help maintain policies, standards, processes, procedures, risk records, control evidence and action trackers.
Assist with internal and external audits, Cyber Essentials activities, ISO/IEC 27001 assurance, supplier reviews and corrective actions.
Support the administration and monitoring of security exceptions, including owners, conditions, compensating controls and expiry dates.
Gather and validate information for security dashboards, governance meetings and management reporting.
Security awareness and business support
Respond to routine security queries and provide practical guidance, escalating higher-risk or uncertain matters.
Support security-awareness campaigns, phishing simulations and targeted communications.
Work with the Service Desk, system administrators, project teams, service owners and suppliers to obtain evidence and progress actions.
Contribute to security reviews for projects, system changes and procurement activities using approved templates and checklists.

Learning and development

Complete the agreed apprenticeship programme, assessments and workplace evidence within required timescales.
Maintain a structured learning plan and apply learning to practical technical and governance tasks.
Develop proficiency in relevant Microsoft security technologies, service-management processes and security standards.
Seek feedback and progressively take ownership of defined activities as competence develops

What you'll bring to the role

A genuine interest in cyber security, information security, and technology.
Strong analytical skills with the ability to follow processes and escalate issues appropriately.
Excellent communication skills, attention to detail, and a professional approach to confidential information.
Good organisational skills and the ability to manage tasks accurately and on time.
A sound understanding of core IT concepts, including devices, networks, cloud services, user accounts, and data protection.
Knowledge of Microsoft 365, Entra ID, Intune, Defender, networking, or security tools would be advantageous.
Awareness of cyber threats, access control, incident response, and information security best practices.
Relevant experience gained through work, study, projects, volunteering, or self-directed learning.
An HNC/HND in Cyber Security, Computing, IT, Networking, or a related discipline, or equivalent practical experience.
A commitment to continuous learning, professional development, and successfully completing the apprenticeship programme.
A collaborative approach, with a willingness to contribute to a positive team environment and uphold Castle Water’s values and standards.

Why choose Castle Water

Castle Water is redefining the utilities sector as one of the fastest-growing and most successful companies in the UK. Guided by our core values of fairness, transparency, tenacity and being supportive, we deliver outstanding service to a diverse range of customers, including some of the UK’s largest companies and public sector organisations.

We believe in putting people first. Whether it’s creating positive interactions with our customers or fostering a supportive workplace culture, our commitment to fairness and transparency ensures we build lasting relationships with our customers.

With over 20,000 5-star Trustpilot reviews, our reputation is built on trust and excellence. We tackle every challenge with tenacity and a dedication to doing what’s fair and right.

Our head office in Blairgowrie, Perthshire, is located within easy reach of Perth and Dundee. As a company embedded in the local community, we actively participate in events that reflect our supportive values. We also have offices in Brentford, London, and Ayr, offering plenty of opportunities to join our growing team.

If you’re looking for company that’s dynamic, forward-thinking and values-driven, Castle Water is the place for you.

It’s been an incredibly rewarding experience

Hannah Bodie

Onboarding Manager