Head of Security Governance

Salary: £71,500 - £82,132 per annum + allowance in the range of £4,500-£9,000 per annum (paid in monthly instalments, non-pensionable)

Type: Permanent

Location: Glasgow / Darlington / Llandudno

Pension: 28.97% employer contribution

Closing Date: 6th July 2025 23:59

N.B. Please note that due to annual leave you might not hear back from us until W/C 14th July.

Student Loans Company is a non-profit making Government-owned organisation to provide loans and grants to students in universities and colleges in the UK. Since 1989, we have enabled our customers to invest in their futures by delivering secure, accurate and efficient assessment, payment and repayment services.

We have an exciting new opportunity (as part of a new department within our Cyber Security team) for a Head of Security Governance to join us here at the Technology Group in SLC. In this role you will be the driving force behind SLC's cybersecurity strategy, meeting compliance obligations and engaging with key external stakeholders (e.g. Government Security Group, GDS and NCSC). You will help shape the security culture, align security with the technology strategy and business objectives, and provide clear and actionable advice to colleagues across SLC to ensure colleague and customer information remain safe. You will also deputise for our CISO when required.

Join us in this transformational role where you will have the opportunity to make a real impact, drive innovation in our security posture, and build a resilient cybersecurity foundation that will protect and enable SLC's future growth.

SLC offer a blended working model which will typically be 2 days in the office and 3 days from home.

What you bring:

• Bachelor's or Master's degree in computer science, information systems, cybersecurity, or related field (or equivalent practical experience), plus relevant security certifications such as CISSP, CISM, or CRISC.
• Proven track record at senior level leading and managing cybersecurity team, including recruiting, training, and supervising staff with demonstrated ability to build and develop high-performing security organisations.
• In-depth understanding of government and/or industry cybersecurity frameworks (at least one of the following: NCSC CAF, PCI DSS, NIST, CIS) combined with very good technology and security knowledge, including system architecture understanding with potential specialisation in specific areas.
• Experience developing long-term security strategies that align with business objectives, coupled with expertise in conducting comprehensive risk assessments and developing effective mitigation strategies.
• Proficiency in security incident handling and crisis management, with very good awareness of evolving cybersecurity threats, trends, and emerging attack vectors.
• Demonstrated experience in developing, implementing, and managing security policies and procedures while ensuring adherence to regulatory requirements and industry standards.
• Excellent verbal and written communication skills to effectively convey security policies and procedures to all organisational levels, with ability to work collaboratively across departments and with external partners.

Benefits:

• 28 days annual leave plus 8 public holidays.
• Option to buy/sell annual leave.
• Flexi-time and enhanced flexible working options available.
• Option to join the Civil Service pension scheme.
• Life insurance cover for 4 x annual salary.
• Enhanced company sick pay and family leave including maternity, paternity and adoption.
• Contributory lifestyle benefit options including discounts at hundreds of retailers, cycle to work scheme, access to the Civil Service Sports and Leisure Club for discounted gym memberships, and an optional dental insurance scheme.

EDI Commitment:

SLC are committed to ensuring our recruitment processes are inclusive for all candidates and will make reasonable adjustments for those who consider themselves to have a disability or long-term condition in line with the Equality Act 2010. Our application process provides candidates with the opportunity to request reasonable adjustments but if you would like to discuss this in more detail, please email ask_recruitment@slc.co.uk.