Strategic Security Risk Analyst

Student Loans Company; Glasgow; On-site; GBP 42,000 - 64,000; Full time

Benefits offered by this job

Annual leave 28d

8 public holidays

Flexi-time

Civil Service pension

Life insurance 4x salary

Sick pay enhancement

Lifestyle discounts

Job summary

Student Loans Company is seeking a Security Risk Analyst to support change initiatives by ensuring security requirements are applied throughout project delivery. The role involves assessing risks to confidentiality, integrity and availability, producing risk reports, and guiding technical proposals in line with the information security framework and assurance requirements.

The successful candidate will contribute to security reporting, risk reviews, and compliance activities, collaborating with

Qualifications

• Knowledge of security frameworks and standards such as ISO 27001, NIST, OWASP, MITRE.
• Experience of performing risk assessments, providing recommendations for meeting security requirements and ensuring compliance with internal standards and regulations.
• A pragmatic approach to risk assessment and application of mitigation activities for information security.

Responsibilities

• Assess informational and technical risks and report and escalate results of risk assessments.
• Provide guidance on security requirements and control suitability for proposals and specifications.
• Create security reports, risk review reports, and other documentation to support BAU and CI efforts, promoting compliance with guidance to internal stakeholders.

Skills

ISO 27001

NIST

OWASP

MITRE

Risk assessments

Information security

Job description

Student Loans Company is seeking a Security Risk Analyst to support change initiatives by ensuring security requirements are applied throughout project delivery. The role involves assessing risks to confidentiality, integrity and availability, producing risk reports, and guiding technical proposals in line with the information security framework and assurance requirements.

The successful candidate will contribute to security reporting, risk reviews, and compliance activities, collaborating with