Senior Security Analyst - Threat & Vulnerability Management

Student Loans Company; Glasgow; Hybrid; GBP 45,000 - 54,000; Full time

Job summary

A public organization in Glasgow is seeking a Cyber Security professional to lead evaluations and manage vulnerabilities. This role involves monitoring threats, collaborating with stakeholders, and aligning security initiatives with business goals. Ideal candidates will have a solid background in vulnerability management, communication skills, and a commitment to continuous learning. The position offers a salary between £45,172 and £53,177 annually, along with attractive benefits like a Civil Service pension, and flexible working options.

Benefits

28 days annual leave plus 8 public holidays

Flexi-time options

Contributory lifestyle benefits

Qualifications

• Hands-on experience with vulnerability management and penetration testing.
• Excellent ability to explain technical concepts to varied audiences.
• Familiarity with cyber security protocols and frameworks.

Responsibilities

• Lead Cyber Security evaluations and vulnerability management.
• Monitor emerging threats to maintain organizational resilience.
• Collaborate with stakeholders to align security initiatives.

Skills

Vulnerability management processes

Communication skills

Threat intelligence interpretation

Continuous learning

Education

Relevant Cyber Security certifications

Tools

IDS/IPS

Encryption

Firewalls

Job description

Salary: 45,172.00 - 53,177.00 GBP Annual

A yearly allowance of up to £5,000 might be available depending on skills and experience

Pension: A Civil Service Pension with an employer contribution of 28.97%. Please refer to the Civil Service Pensions website for more information.

Type: Full time

Please note: The advert will close at 11:59PM the night before the listed closing date.

SLC offer a blended working model which will typically be 2 days in the office and 3 days from home.

Is it time you unlocked your potential?

Student Loans Company is a non‑profit, government‑owned organisation that provides loans and grants to students in universities and colleges in the UK. Since 1989, we have enabled our customers to invest in their futures by delivering secure, accurate and efficient assessment, payment and repayment services.

Our Values

• Honesty: We act with integrity and transparency, sharing information openly and addressing challenges with courage.
• Empowerment: We enable people to take initiative, make impactful decisions, and continuously learn and grow.
• Accountability: We deliver on commitments, own our successes and mistakes, and strive for quality outcomes.
• Respect: We value diverse perspectives, actively listen, and create an inclusive environment where everyone belongs.
• Trust: We collaborate across teams, build dependable relationships, and work as one to deliver for our customers.

These values are more than words—they guide our decisions, shape our collaborations, and strengthen our impact on the students we serve.

About the role

Join SLC's Cyber Security team and lead the proactive evaluation and management of threats, vulnerabilities, and exposures to strengthen our security posture. You'll drive both traditional Vulnerability Management and Continuous Threat Exposure Management, ensuring risks are identified, prioritised, and addressed before they impact the business. By overseeing Cyber Threat Intelligence, you'll deliver actionable insights that inform defensive strategies and operational decisions, while managing the BAU penetration testing calendar and providing expert guidance for project delivery.

In this role, you’ll facilitate forums to review risk posture and remediation, oversee CTEM tooling, and monitor emerging threats and attack trends to keep SLC resilient against evolving risks. Collaborating closely with stakeholders, you’ll align security initiatives with business objectives, communicate intelligence insights to senior leaders, and champion enhancements through automation and best practices. With a commitment to continuous learning and mentoring junior team members, you’ll play an important role in building capability and resilience across the organisation.

What you bring

• Excellent understanding of vulnerability management processes, best practices, and hands‑on experience with exposure management, remediation coordination, and penetration testing methodologies/scoping.
• Very good verbal/written communication skills, with proven ability to explain technical concepts to both technical and non‑technical audiences, present governance forums, and engage senior leadership.
• Familiarity with IDS/IPS, encryption, cryptography, key management, and firewalls, alongside awareness of infrastructure systems including Windows, UNIX/Linux, and Solaris.
• Ability to interpret cyber threat intelligence, gather insights from trusted sources, and monitor emerging threats to advise on secure solutions.
• Commitment to continuous learning, mentoring junior team members, and building team capability and resilience.
• Solid grounding in current security standards and frameworks such as ISO 27001 and PCI‑DSS.
• Troubleshooting experience with UNIX/Linux OS will be a great advantage but is not essential.

You can expect more from a career with SLC

We support colleagues to unlock their potential through our Career Pathways development programme and offer an excellent benefit and rewards package that includes:

• 28 days annual leave plus 8 public holidays
• Option to buy/sell annual leave
• Flexi‑time and enhanced flexible working options available
• Option to join the Civil Service pension scheme
• Life insurance cover for 4 x annual salary
• Enhanced company sick pay and family leave including maternity, paternity and adoption
• Contributory lifestyle benefit options including discounts at hundreds of retailers, cycle‑to‑work scheme, access to the Civil Service Sports and Leisure Club for discounted gym memberships, and an optional dental insurance scheme

The Legal Bits

We'll need you to confirm you have the right to work in the UK. If we offer you a job and you accept, there are some background checks we need to complete before you can start with us. This will include employment history, criminal record check, credit reference check and fraud check.

SLC are committed to ensuring our recruitment processes are inclusive for all candidates and will make reasonable adjustments for those who consider themselves to have a disability or long‑term condition in line with the Equality Act 2010. Our application process provides candidates with the opportunity to request reasonable adjustments but if you would like to discuss this in more detail, please email [e-mail].