Security Analyst - Risk

3M; Glasgow; Hybrid; GBP 38,000 - 45,000; Full time

Benefits offered by this job

28 days annual leave

Flexi-time

Civil Service pension

Job summary

Student Loans Company is seeking a Security Risk Analyst to support change initiatives by applying security requirements throughout project delivery lifecycles.

You will assess risks to information and systems, report results, and guide security controls within the framework of the organisation's assurance requirements.

Qualifications

• Knowledge of security frameworks and standards such as ISO 27001, NIST, OWASP, MITRE.
• Experience performing risk assessments and recommending security controls to meet requirements and regulations.
• Pragmatic approach to risk assessment and mitigation in information security.

Responsibilities

• Assess informational and technical risks and report results.
• Create security reports, risk reviews and documentation to support BAU and CI.
• Promote compliance with government security guidance to internal stakeholders.

Skills

ISO 27001

NIST

OWASP/MITRE

Job description

Salary

38,314.00 - 45,176.00 GBP Annual

Pension

A Civil Service Pension with an employer contribution of 28.97%. Please refer to the Civil Service Pensions website for more information.

Type

Full time

**Please note: The advert will close at 11:59PM the night before the listed closing date.**

SLC offer a blended working model which will typically be 2 days in the office and 3 days from home.

Is it time you unlocked your potential?

Student Loans Company is a non-profit making Government-owned organisation to provide loans and grants to students in universities and colleges in the UK. Since 1989, we have enabled our customers to invest in their futures by delivering secure, accurate and efficient assessment, payment and repayment services.

Our Values

• Honesty: We act with integrity and transparency, sharing information openly and addressing challenges with courage.
• Empowerment: We enable people to take initiative, make impactful decisions, and continuously learn and grow.
• Accountability: We deliver on commitments, own our successes and mistakes, and strive for quality outcomes.
• Respect: We value diverse perspectives, actively listen, and create an inclusive environment where everyone belongs.
• Trust: We collaborate across teams, build dependable relationships, and work as one to deliver for our customers.

These values are more than words-they guide our decisions, shape our collaborations, and strengthen our impact on the students we serve.

About the role

We have an exciting opportunity for a Security Risk Analyst to join our team to support SLC change initiatives by assisting in the application and assurance of security requirements for projects and supporting them through their delivery lifecycle.

As part of their role, the successful candidate will assess informational and technical risks in terms of impact to systems, service confidentiality, integrity and availability, and report and elevate results of risk assessments, whilst providing guidance as to security requirements and control suitability for technical proposals and technical specification documents, in relation to the organisations information security framework and assurance requirements.

The Risk Analyst will also create security reports, risk review reports, and other security documentation to support Business As Usual (BAU), and Continuous Improvement (CI) efforts, with occasional support to larger project activities, whilst promoting compliance with Government security guidance to internal stakeholders.

What you bring:

• Knowledge of security frameworks and standards such as ISO 27001, NIST, OWASP, MITRE.
• Experience of performing risk assessments, providing recommendations for meeting the security requirements of systems and information systems so that they remain compliant with internal standards and published regulations and legislation.
• A pragmatic approach to Risk assessment and the application of mitigation activities for information security.

You can expect more from a career with SLC.

• 28 days annual leave plus 8 public holidays
• Option to buy/sell annual leave
• Flexi-time and enhanced flexible working options available
• Option to join the Civil Service pension scheme
• Life insurance cover for 4 x annual salary
• Enhanced company sick pay and family leave including maternity, paternity and adoption
• Contributory lifestyle benefit options including discounts at hundreds of retailers, cycle to work scheme, access to the Civil Service Sports and Leisure Club for discounted gym memberships, and an optional dental insurance scheme
• To find out what's it's like to work at Student Loans Company click here SLC Careers

The Legal Bits

We'll need you to confirm you have the right to work in the UK. If we offer you a job and you accept, there are some background checks we need to complete before you can start with us. This will include employment history, criminal record check, credit reference check and fraud check.

EDI

As a proud Disability Confident Leader, we're committed to creating an inclusive recruitment experience that empowers people of all abilities. Our team actively promotes accessible hiring practices, supports candidates with disabilities throughout their employment journey to help build a diverse equitable workplace at SLC.

SLC will make reasonable adjustments for those who consider themselves to have a disability or long-term condition in line with the Equality Act 2010. Our application process provides candidates with the opportunity to request reasonable adjustments but if you would like to discuss this in more detail, please email [e-mail].

Use of AI in Job Applications

Artificial Intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see Candidate Guidance for more information on appropriate and inappropriate use.