Risk Security Analyst

Student Loans Company; Glasgow; On-site; GBP 42,000 - 64,000; Full time

Benefits offered by this job

Annual leave 28d

8 public holidays

Flexi-time

Civil Service pension

Life insurance 4x salary

Sick pay enhancement

Lifestyle discounts

Job summary

Student Loans Company is seeking a Security Risk Analyst to support change initiatives by ensuring security requirements are applied throughout project delivery. The role involves assessing risks to confidentiality, integrity and availability, producing risk reports, and guiding technical proposals in line with the information security framework and assurance requirements.

The successful candidate will contribute to security reporting, risk reviews, and compliance activities, collaborating with

Qualifications

• Knowledge of security frameworks and standards such as ISO 27001, NIST, OWASP, MITRE.
• Experience of performing risk assessments, providing recommendations for meeting security requirements and ensuring compliance with internal standards and regulations.
• A pragmatic approach to risk assessment and application of mitigation activities for information security.

Responsibilities

• Assess informational and technical risks and report and escalate results of risk assessments.
• Provide guidance on security requirements and control suitability for proposals and specifications.
• Create security reports, risk review reports, and other documentation to support BAU and CI efforts, promoting compliance with guidance to internal stakeholders.

Skills

ISO 27001

NIST

OWASP

MITRE

Risk assessments

Information security

Job description

Location: Glasgow, Darlington or Llandudno

Pension: A Civil Service Pension with an employer contribution of 28.97%

Advert Closing Date: 10th September

Is it time you unlocked your potential?

Student Loans Company is a non-profit making Government owned organisation to provide loans and grants to students in universities and colleges in the UK. Since 1989, we have enabled our customers to invest in their futures by delivering secure, accurate and efficient assessment, payment and repayment services.

Our Values

Culture is at the hear of everything we do at SLC and we are guided by our five values which help make SLC a great place to work:

• Honesty: We act with integrity and transparency, sharing information openly and addressing challenges with courage.
• Empowerment: We enable people to take initiative, make impactful decisions, and continuously learn and grow.
• Accountability: We deliver on commitments, own our successes and mistakes, and strive for quality outcomes.
• Respect: We value diverse perspectives, actively listen, and create an inclusive environment where everyone belongs.
• Trust: We collaborate across teams, build dependable relationships, and work as one to deliver for our customers.

These values are more than words – they guide our decisions, shape our collaborations, and strengthen our impact on the students we serve.

About the role

We have an exciting opportunity for a Security Risk Analyst to join our team to support SLC change initiatives by assisting in the application and assurance of security requirements for projects and supporting them through their delivery lifecycle.

As part of their role, the successful candidate will assess informational and technical risks in terms of impact to systems, service confidentiality, integrity and availability, and report and escalatE results of risk assessments, whilst providing guidance as to security requirements and control suitability for technical proposals and technical specification documents, in relation to the organisations information security framework and assurance requirements.

The Risk Analyst will also create security reports, risk review reports, and other security documentation to support Business As Usual (BAU), and Continuous Improvement (CI) efforts, with occasional support to larger project activities, whilst promoting compliance with Government security guidance to internal stakeholders.

What you bring:

• Knowledge of security frameworks and standards such as ISO 27001, NIST, OWASP, MITRE.
• Experience of performing risk assessments, providing recommendations for meeting the security requirements of systems and information systems so that they remain compliant with internal standards and published regulations and legislation.
• A pragmatic approach to Risk assessment and the application of mitigation activities for information security.

You can expect more from a career with SLC. We support colleagues to unlock their potential through our Career Pathways development programme and offer an excellent benefit and rewards package that includes:

• 28 days annual leave plus 8 public holidays
• Option to buy/sell annual leave
• Flexi-time and enhanced flexible working options available
• Option to join the Civil Service pension scheme
• Life insurance cover for 4 x annual salary
• Enhanced company sick pay and family leave including maternity, paternity and adoption
• Contributory lifestyle benefit options including discounts at hundreds of retailers, cycle to work scheme, access to Civil Service Sports and Leisure Club for discounted gym memberships, and an optional dental insurance scheme

The Legal Bits

We’ll need you to confirm that you have the right to work in the UK. If we offer you a job and you accept, there are some background checks we need to complete before you can start with us. This will include employment history, criminal record check, credit reference check and fraud check.

SLC are committed to ensuring our recruitment processes are inclusive for all candidates and will make reasonable adjustments for those who consider themselves to have a disability or long-term condition in line with the Equality Act 2010. Our application process provides candidates with the opportunity to request reasonable adjustments but if you would like to discuss this in more detail, please email [e-mail]