Security Manager - Risk and Consulting in Glasgow

Salary: £61,950.00 - £72,952.00 GBP Annual

Pension: A Civil Service Pension with an employer contribution of 28.97%. Please refer to the Civil Service Pensions website for more information.

Type: Full time

Please note: The advert will close at 11:59PM the night before the listed closing date.

SLC offer a blended working model which will typically be 2 days in the office and 3 days from home.

Student Loans Company is a non-profit making Government-owned organisation to provide loans and grants to students in universities and colleges in the UK. Since 1989, we have enabled our customers to invest in their futures by delivering secure, accurate and efficient assessment, payment and repayment services.

Culture is at the heart of everything we do at SLC and we are guided by our five values which help make SLC a great place to work:

• Honesty: We act with integrity and transparency, sharing information openly and addressing challenges with courage.
• Empowerment: We enable people to take initiative, make impactful decisions, and continuously learn and grow.
• Accountability: We deliver on commitments, own our successes and mistakes, and strive for quality outcomes.
• Respect: We value diverse perspectives, actively listen, and create an inclusive environment where everyone belongs.
• Trust: We collaborate across teams, build dependable relationships, and work as one to deliver for our customers.

These values are more than words - they guide our decisions, shape our collaborations, and strengthen our impact on the students we serve.

As Security Manager - Security Risk, you will play a key role in helping us deliver secure, resilient services by ensuring security risks are identified, understood and managed across major technology and business change programmes. Leading a team of security specialists, you will provide trusted advice to project teams and senior stakeholders, helping them make informed risk decisions while enabling successful delivery. Working across a complex technology landscape, you’ll influence how security is embedded into new systems, services and transformation initiatives from the outset. This is an opportunity to shape security risk practices at scale, drive continuous improvement and make a tangible impact on the protection of critical services, data and customers. Success in the role will come from balancing risk with business outcomes, building strong relationships and providing clear, credible security leadership across the organisation.

What you Bring:

• Ability to lead and mentor a diverse team of security professionals which can include variable numbers of partner staff.
• Familiarity with threat and risk analysis for complex, high risk or business critical systems.
• Proficiency in analysing and implementing technical or security policies within a large organisation.
• Ability to design and implement security controls aligned with organizational requirements, whilst navigating changes and proactively responding to evolving organizational requirements.
• Ability to present information to non-technical senior stakeholders with the ability to influence decision making at senior levels, promoting security priorities.
• Expertise in cloud, application, infrastructure and networking security controls assessment and implementation - with experience across cyber, procedural and technical security domains.
• Proven experience delivering high-quality security advice, including technical security solutions with medium to large organisations.
• Strong working knowledge of a variety of industry and government methods, frameworks and tooling including; UK Government security framework (SPF), ISO 27001, Data Protection Act, Cyber Assessment Framework (CAF), Secure by Design (SbD).
• Experience developing and implementing security policies and control frameworks in complex, hybrid environments.
• Experience in leading a small team, in a high demand environment, with time bound outputs and varying requirements.

The following is desirable:

• Hold or are working towards a recognised security certification such as; Certified Security Risk Manager (CSRM), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC) or equivalent / adjacent.
• Previous experience in the public sector / UK Government departments.

You can expect more from a career with SLC. We support colleagues to unlock their potential through our Career Pathways development programme and offer an excellent benefit and rewards package that includes:

• 28 days annual leave plus 8 public holidays.
• Option to buy/sell annual leave.
• Flexi-time and enhanced flexible working options available.
• Option to join the Civil Service pension scheme.
• Life insurance cover for 4 x annual salary.
• Enhanced company sick pay and family leave including maternity, paternity and adoption.
• Contributory lifestyle benefit options including discounts.