Security Analyst - Risk

Student Loans Company; Glasgow; On-site; GBP 38,000 - 45,000; Full time

Benefits offered by this job

28 days annual leave

8 public holidays

Flexi-time

Civil Service pension

Life insurance 4x salary

Enhanced sick pay & family leave

Lifestyle discounts

Dental insurance

Job summary

The Student Loans Company is seeking a Security Risk Analyst in Glasgow to support change initiatives by assessing risks and defining security requirements across projects from concept to delivery.

Responsibilities include creating security reports and risk reviews, reporting results, and ensuring compliance with government guidance while supporting BAU and CI activities. The role offers a blended working model with two days in the office and three at home.

Qualifications

• Knowledge of security frameworks and standards such as ISO 27001, NIST, OWASP, MITRE.
• Experience of performing risk assessments, providing recommendations for meeting the security requirements of systems and information systems so that they remain compliant with internal standards and published regulations and legislation.
• A pragmatic approach to Risk assessment and the application of mitigation activities for information security.

Responsibilities

• Assess risks to systems, service confidentiality, integrity and availability.
• Create security reports, risk review reports, and other security documentation to support BAU and CI efforts.
• Guide security requirements and control suitability for technical proposals and specifications.

Skills

Security standards

Risk assessment

Information security

Regulatory compliance

Job description

Salary: 38,314.00 - 45,176.00 GBP Annual Pension: A Civil Service Pension with an employer contribution of 28.97%.

Type: Full time

Please note: The advert will close at 11:59PM the night before the listed closing date.

SLC offer a blended working model which will typically be 2 days in the office and 3 days from home.

Is it time you unlocked your potential?

Student Loans Company is a non-profit making Government-owned organisation to provide loans and grants to students in universities and colleges in the UK. Since 1989, we have enabled our customers to invest in their futures by delivering secure, accurate and efficient assessment, payment and repayment services.

Our Values Culture is at the heart of everything we do at SLC and we are guided by our five values which help make SLC a great place to work:

• Honesty: We act with integrity and transparency, sharing information openly and addressing challenges with courage.
• Empowerment: We enable people to take initiative, make impactful decisions, and continuously learn and grow.
• Accountability: We deliver on commitments, own our successes and mistakes, and strive for quality outcomes.
• Respect: We value diverse perspectives, actively listen, and create an inclusive environment where everyone belongs.
• Trust: We collaborate across teams, build dependable relationships, and work as one to deliver for our customers.

About the role

We have an exciting opportunity for a Security Risk Analyst to join our team to support SLC change initiatives by assisting in the application and assurance of security requirements for projects and supporting them through their delivery lifecycle. As part of their role, the successful candidate will assess informational and technical risks in terms of impact to systems, service confidentiality, integrity and availability, and report and elevate results of risk assessments, whilst providing guidance as to security requirements and control suitability for technical proposals and technical specification documents, in relation to the organisations information security framework and assurance requirements. The Risk Analyst will also create security reports, risk review reports, and other security documentation to support Business As Usual (BAU), and Continuous Improvement (CI) efforts, with occasional support to larger project activities, whilst promoting compliance with Government security guidance to internal stakeholders.

What you bring:

• Knowledge of security frameworks and standards such as ISO 27001, NIST, OWASP, MITRE.
• Experience of performing risk assessments, providing recommendations for meeting the security requirements of systems and information systems so that they remain compliant with internal standards and published regulations and legislation.
• A pragmatic approach to Risk assessment and the application of mitigation activities for information security.

You can expect more from a career with SLC. We support colleagues to unlock their potential through our Career Pathways development programme and offer an excellent benefit and rewards package that includes:

• 28 days annual leave plus 8 public holidays
• Option to buy/sell annual leave
• Flexi-time and enhanced flexible working options available
• Option to join the Civil Service pension scheme
• Life insurance cover for 4 x annual salary
• Enhanced company sick pay and family leave including maternity, paternity and adoption
• Contributory lifestyle benefit options including discounts at hundreds of retailers, cycle to work scheme, access to the Civil Service Sports and Leisure Club for discounted gym memberships, and an optional dental insurance scheme

The Legal Bits

We’ll need you to confirm you have the right to work in the UK. If we offer you a job and you accept, there are some background checks we need to complete before you can start with us. This will include employment history, criminal record check, credit reference check and fraud check.

EDI

As a proud Disability Confident Leader, we’re committed to creating an inclusive recruitment experience that empowers people of all abilities. Our team actively promotes accessible hiring practices, supports candidates with disabilities throughout their employment journey to help build a diverse equitable workplace at SLC. SLC will make reasonable adjustments for those who consider themselves to have a disability or long-term condition in line with the Equality Act 2010. Our application process provides candidates with the opportunity to request reasonable adjustments but if you would like to discuss this in more detail, please email [e-mail].

Use of AI in Job Applications

Artificial Intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see Candidate Guidance for more information on appropriate and inappropriate use.

When you join SLC you will become a valued member of our team which has a strong purpose - enabling more than 1.5 million students each year to invest in their futures via access to further and higher education. The Student Loans Company is a non-profit making government-owned organisation, who enable opportunity by providing funding to students in universities and colleges in the UK. Each year, we process around 1.5 million student finance applications worth £22 billion in loans and grants. We dedicate ourselves to supporting 9.7 million customers and administer a loan book valued at £260.8 billion. Whether a customer is applying for student finance or repaying their loan we want to make their experience as easy as possible, at the same time as delivering the exceptional service that they deserve.