Security Manager - Risk and Consulting

Salary:

£61,950.00 - £72,952.00 GBP Annual

Pension:

A Civil Service Pension with an employer contribution of 28.97%. Please refer to the Civil Service Pensions website for more information.

Type:

Full time

**Please note: The advert will close at 11:59PM the night before the listed closing date.**

SLC offer a blended working model which will typically be 2 days in the office and 3 days from home. 

Is it time you unlocked your potential?

Student Loans Company is a non-profit making Government-owned organisation to provide loans and grants to students in universities and colleges in the UK.  Since 1989, we have enabled our customers to invest in their futures by delivering secure, accurate and efficient assessment, payment and repayment services.

Our Values 

Culture is at the heart of everything we do at SLC and we are guided by our five values which help make SLC a great place to work: 

• Honesty: We act with integrity and transparency, sharing information openly and addressing challenges with courage.

• Empowerment: We enable people to take initiative, make impactful decisions, and continuously learn and grow.

• Accountability: We deliver on commitments, own our successes and mistakes, and strive for quality outcomes.

• Respect: We value diverse perspectives, actively listen, and create an inclusive environment where everyone belongs.

• Trust: We collaborate across teams, build dependable relationships, and work as one to deliver for our customers.

These values are more than words—they guide our decisions, shape our collaborations, and strengthen our impact on the students we serve.

Security Manager – Security Risk

About the Role

As Security Manager – Security Risk, you will play a key role in helping us deliver secure, resilient services by ensuring security risks are identified, understood and managed across major technology and business change programmes.

Leading a team of security specialists, you will provide trusted advice to project teams and senior stakeholders, helping them make informed risk decisions while enabling successful delivery. Working across a complex technology landscape, you'll influence how security is embedded into new systems, services and transformation initiatives from the outset.

This is an opportunity to shape security risk practices at scale, drive continuous improvement and make a tangible impact on the protection of critical services, data and customers. Success in the role will come from balancing risk with business outcomes, building strong relationships and providing clear, credible security leadership across the organisation.

What you Bring:

• Ability to lead and mentor a diverse team of security professionals which can include variable numbers of partner staff 
• Familiarity with threat and risk analysis for complex, high risk or business critical systems
• Proficiency in analysing and implementing technical or security policies within a large organisation
• Ability to design and implement security controls aligned with organizational requirements, whilst navigating changes and proactively responding to evolving organizational requirements
• Ability to present information to non-technical senior stakeholders with the ability to influence decision making at senior levels, promoting security priorities
• Expertise in cloud, application, infrastructure and networking security controls assessment and implementation – with experience across cyber, procedural and technical security domains
• Proven experience delivering high-quality security advice, including technical security solutions with medium to large organisations
• Strong working knowledge of a variety of industry and government methods, frameworks and tooling including; UK Government security framework (SPF), ISO 27001, Data Protection Act, Cyber Assessment Framework (CAF), Secure by Design (SbD)
• Experience developing and implementing security policies and control frameworks in complex, hybrid environments
• Experience in leading a small team, in a high demand environment, with time bound outputs and varying requirements

The following is desirable:

• Hold or are working towards a recognised security certification such as; Certified Security Risk Manager (CSRM), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC) or equivalent / adjacent
• Previous experience in the public sector / UK Government departments

You can expect more from a career with SLC. We support colleagues to unlock their potential through our Career Pathways development programme and offer an excellent benefit and rewards package that includes:

• 28 days annual leave plus 8 public holidays

• Option to buy/sell annual leave

• Flexi-time and enhanced flexible working options available

• Option to join the Civil Service pension scheme

• Life insurance cover for 4 x annual salary

• Enhanced company sick pay and family leave including maternity, paternity and adoption

• Contributory lifestyle benefit options including discounts at hundreds of retailers, cycle to work scheme, access to the Civil Service Sports and Leisure Club for discounted gym memberships, and an optional dental insurance scheme

• To find out what’s it’s like to work at Student Loans Company click here SLC Careers

The Legal Bits

We’ll need you to confirm you have the right to work in the UK. If we offer you a job and you accept, there are some background checks we need to complete before you can start with us. This will include employment history, criminal record check, credit reference check and fraud check.

EDI

As a proud Disability Confident Leader, we’re committed to creating an inclusive recruitment experience that empowers people of all abilities. Our team actively promotes accessible hiring practices, supports candidates with disabilities throughout their employment journey to help  build a diverse equitable workplace at SLC.

 

SLC will make reasonable adjustments for those who consider themselves to have a disability or long-term condition in line with the Equality Act 2010. Our application process provides candidates with the opportunity to request reasonable adjustments but if you would like to discuss this in more detail, please email [email protected].

Use of AI in Job Applications

Artificial Intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see Candidate Guidance for more information on appropriate and inappropriate use.