Information Security - Risk Analyst (Third-Party Risk)

Can you spot security risks before they put vital information and services at risk? Do you thrive on turning third-party security issues into clear, practical recommendations? Have you got the skills to influence stakeholders and strengthen security across a diverse supplier network? If so, we'd love to hear from you! The Maritime and Coastguard Agency (MCA) is seeking an Information Security - Risk Analyst (Third-Party Risk) to join their team. Information Security is the practice of assuring the security, confidentiality, integrity and availability of information, assets, technology, people, systems and services throughout the MCA and its suppliers. The role of the Information Security team is to contribute to and influence the Information Security strategy and function through internal consultation, evaluation, and assessment. The team promotes security best practice and ensures that information security requirements are fully considered and implemented as part of the design throughout projects and operational processes. Joining our department comes with many benefits, including:

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave), plus 8 bank holidays and a privilege day for the King's birthday
• Flexible working options where we encourage a great work-life balance.
Read more in the Benefits section below! Find out more about what it's like working at: Maritime and Coastguard Agency - Department for Transport Careers As an Information Security - Risk Analyst (Third-Party Risk) you will help safeguard the MCA's information and assets by assessing suppliers against security requirements and identifying, communicating and escalating third-party risks. You will work with technical and non-technical stakeholders to support informed, risk-based decisions, ongoing supplier reviews and proportionate remediation plans, while helping to improve third-party risk processes, reporting and governance. This role is aligned to the skills set out in the Government Security Professions Framework Your responsibilities will include, but aren't limited to:
• Conducting proportionate security risk assessments for all suppliers participating in tender processes and communicating findings and recommendations to stakeholders.
• Interpreting third-party security risks and communicating clearly and proportionately with technical and non-technical stakeholders.
• Identifying and escalating third-party security risks in line with organisational risk appetite.
• Working with Protective Security, Contract Management and Procurement to support supplier reviews and proportionate remediation plans the reduce supply chain risks.
• Supporting the Third-Party Risk Specialist to develop KPIs for monitoring and reporting third-party risk.
• Supporting the effective operation of the Third-Party Risk Operational Security Working Group by coordinating meetings, capturing decisions and actions, and supporting follow-
• Contributing to continuous improvement of Third-Party Risk Management processes and deputising for the Third-Party Risk Specialist in internal and external forums
• Working flexibly with the Protective Security team, providing cover where required