Information Security - Risk Analyst (Third Party Risk)

Maritime and Coastguard Agency; Southampton; Hybrid; GBP 32,000 - 43,000; Full time

Benefits offered by this job

Employer pension 28.97%

25 days annual leave

8 Bank Holidays

Staff discount portal

Career development opportunities

Flexible working

Job summary

Maritime and Coastguard Agency is seeking an Information Security – Risk Analyst (Third-Party Risk) in Southampton. The role focuses on assessing risks from suppliers, communicating findings to both technical and non-technical colleagues, and supporting governance around third-party risk.

The position offers hybrid working with a civil service pension and generous leave. Responsibilities include risk assessment across tender processes, escalation of third-party risks, and collaboration with

Qualifications

• Ability to apply security, risk management or assurance principles to identify, assess and communicate risks.

Responsibilities

• Conduct proportionate security risk assessments for suppliers and communicate findings to stakeholders.

Skills

Security risk assessment

Stakeholder communication

Risk management

Governance reporting

Job description

482482 Information Security - Risk Analyst (Third Party Risk)

Maritime and Coastguard Agency

Apply before 11:55 pm on Monday 19th October 2026

Location: Southampton (This role is suitable for hybrid working)

Salary: £37,090 - A Civil Service Pension with an employer contribution of 28.97%

The Maritime and Coastguard Agency (MCA) is seeking an Information Security – Risk Analyst (Third-Party Risk) to join their team. Information Security is the practice of assuring the security, confidentiality, integrity and availability of information, assets, technology, people, systems and services throughout the MCA and its suppliers.

The role of the Information Security team is to contribute to and influence the Information Security strategy and function through internal consultation, evaluation, and assessment. The team promotes security best practice and ensures that information security requirements are fully considered and implemented as part of the design throughout projects and operational processes.

Top Responsibilities

• Conducting proportionate security risk assessments for all suppliers participating in tender processes and communicating findings and recommendations to stakeholders.
• Interpreting third‑party security risks and communicating clearly and proportionately with technical and non‑technical stakeholders.
• Identifying and escalating third-party security risks in line with organisational risk appetite.
• Working with Protective Security, Contract Management and Procurement to support supplier reviews and proportionate remediation plans the reduce supply chain risks.
• Supporting the Third-Party Risk Specialist to develop KPIs for monitoring and reporting third-party risk.

For more information on the role and responsibilities please see the full job advert on CS Jobs using the link provided.

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave).
• 8 Bank Holidays plus an additional Privilege Day to mark the King's birthday.
• Access to the staff discount portal.
• Excellent career development opportunities and the potential to undertake professional qualifications relevant to your role paid for by the department, such as CIPD, Prince2, apprenticeships, etc.
• Joining a diverse and inclusive workforce with a range of staff communities to support all our colleagues.
• 24-hour Employee Assistance Programme providing free confidential help and advice for staff.
• Flexible working options where we encourage a great work-life balance.

About You

To be successful in this role you will need to have the following experience:

• Demonstrates the ability to apply security, risk management or assurance principles to identify, assess and communicate risks
• Ability to communicate security and risk-related information to both technical and non-technical stakeholders.
• Able to use information from a range of sources to support risk assessment, decision-making and governance activities.
• Experience of building relationships and influencing stakeholders, working collaboratively and inclusively, sharing information and knowledge to achieve shared outcomes.

This vacancy closes at 23:55 on Monday 19th October 2026