Information Security - Risk Analyst (Third Party Risk) at Maritime and Coastguard Agency in Southampton

Job summary

Can you spot security risks before they put vital information and services at risk?

Do you thrive on turning third-party security issues into clear, practical recommendations?

Have you got the skills to influence stakeholders and strengthen security across a diverse supplier network?

If so, we’d love to hear from you!

The Maritime and Coastguard Agency (MCA) is seeking an Information Security – Risk Analyst (Third-Party Risk) to join their team. Information Security is the practice of assuring the security, confidentiality, integrity and availability of information, assets, technology, people, systems and services throughout the MCA and its suppliers.

The role of the Information Security team is to contribute to and influence the Information Security strategy and function through internal consultation, evaluation, and assessment. The team promotes security best practice and ensures that information security requirements are fully considered and implemented as part of the design throughout projects and operational processes.

Joining our department comes with many benefits, including:

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave), plus 8 bank holidays and a privilege day for the King’s birthday
• Flexible working options where we encourage a great work-life balance.

Read more in the Benefits section below!

Find out more about what it's like working at: Maritime and Coastguard Agency - Department for Transport Careers

Job description

As an Information Security - Risk Analyst (Third-Party Risk) you will help safeguard the MCA’s information and assets by assessing suppliers against security requirements and identifying, communicating and escalating third-party risks. You will work with technical and non-technical stakeholders to support informed, risk-based decisions, ongoing supplier reviews and proportionate remediation plans, while helping to improve third-party risk processes, reporting and governance.

This role is aligned to the skills set out in the Government Security Professions Framework

Your responsibilities will include, but aren’t limited to:

• Conducting proportionate security risk assessments for all suppliers participating in tender processes and communicating findings and recommendations to stakeholders.
• Interpreting third‑party security risks and communicating clearly and proportionately with technical and non‑technical stakeholders.
• Identifying and escalating third-party security risks in line with organisational risk appetite.
• Working with Protective Security, Contract Management and Procurement to support supplier reviews and proportionate remediation plans the reduce supply chain risks.
• Supporting the Third-Party Risk Specialist to develop KPIs for monitoring and reporting third-party risk.
• Supporting the effective operation of the Third‑Party Risk Operational Security Working Group by coordinating meetings, capturing decisions and actions, and supporting follow‑
• Contributing to continuous improvement of Third-Party Risk Management processes and deputising for the Third-Party Risk Specialist in internal and external forums
• Working flexibly with the Protective Security team, providing cover where required

Person specification

Required experience:

To be successful in this role you will need to have the following experience:

• Demonstrates the ability to apply security, risk management or assurance principles to identify, assess and communicate risks
• Ability to communicate security and risk-related information to both technical and non-technical stakeholders.
• Able to use information from a range of sources to support risk assessment, decision-making and governance activities.
• Experience of building relationships and influencing stakeholders, working collaboratively and inclusively, sharing information and knowledge to achieve shared outcomes.

Additional Information

Operational Delivery Profession (ODP) is the largest and most diverse professional community across the Civil Service. Many of us will have an association with several professional communities or specialisms, ODP applies to all public facing roles / or a role that is primarily aligned to supporting the work of those with public facing roles. All critical to the delivery of UK public services .

Working hours, office attendance and travel requirements

Full time roles consist of 37 hours per week.

Whilst we welcome applications from those looking to work with us on a part time basis, there is a business requirement for the successful candidate to be able to work at least 30 hours per week.

This role is suitable for hybrid working, which is a non-contractual arrangement where a combination of workplace and home-based working can be accommodated subject to business requirements.

The expectation at present is a minimum of 60% of your working time a month will be spent at either your designated workplace (one of th e locations cited in the advert) or, when required for business reasons, in another office/work location/visiting stakeholders. Your designated workplace will be your contractual place of work. Ther e may be occasions where you are required to attend above the minimum expectation.

Some UK travel required, including overnight stays.

If you have a question about hybrid working, part time/job share hours, flexible working, travelling for work, or require a reasonable adjustment, please contact the Vacancy Holder during the recruitment process to avoid possible disappointment later in the process should your working arrangements not be compatible with the requirements of the role (see below for contact details).

Visa Sponsorship

Please note that we will only offer sponsorship for a skilled worker visa where a role has been deemed to be business critical. This role does not meet that category, and we will not sponsor a visa . Therefore, this role is not open to applications from those who require sponsorship – candidates must ensure they have the appropriate right to work in the UK before applying. Should you apply for this role and be found to require sponsorship, your application will be rejected and any provisional offer of employment withdrawn.

Behaviours

We'll assess you against these behaviours during the selection process:

• Making Effective Decisions
• Communicating and Influencing
• Working Together
• Delivering at Pace

Benefits

Alongside your salary of £37,090, Maritime and Coastguard Agency contributes

£10,744 towards you being a member of the Civil Service Defined Benefit Pension scheme.

Find out what benefits a Civil Service Pension provides (opens in a new window).

• Being part of our brilliant Civil Service means you will have access to a wide range of fantastic benefits:
• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave).
• 8 Bank Holidays plus an additional Privilege Day to mark the King’s birthday.
• Access to the staff discount portal.
• Excellent career development opportunities and the potential to undertake professional qualifications relevant to your role paid for by the department, such as CIPD, Prince2, apprenticeships, etc.
• Joining a diverse and inclusive workforce with a range of staff communities to support all our colleagues.
• 24-hour Employee Assistance Programme providing free confidential help and advice for staff.
• Flexible working options where we encourage a great work-life balance.

Find out more about the benefits of working at MCA (opens in a new window).

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

Selection process details

This vacancy is using Success Profiles (opens in a new window) , and will assess your Behaviours and Experience.

How to apply:

Our selection process ensures a comprehensive assessment of each applicant's skills, and potential fit within our organisation.

The selection process for this role will be:

Stage 1: Sift of CV and personal statement

Stage 2: Interview

You must be successful at each stage to progress to the next stage.

Stage 1: Sift

At sift, you will be assessed against the following Success Profile elements:

• Experience – you will be asked to provide a CV (unlimited wordcount) and personal statement (500-word count). Please provide evidence of your Experience of the following: • Demonstrates the ability to apply security, risk management or assurance principles to identify, assess and communicate risks
• Experience of building relationships and influencing stakeholders working collaboratively and inclusively, sharing information and knowledge to achieve shared outcomes.

Should a large number of applications be received, an initial sift may be conducted using the lead Success Profile element, Demonstrates the ability to apply security, risk management or assurance principles to identify, assess and communicate risks.

Candidates who pass the initial sift may be progressed to a full sift or progressed straight to assessment/interview.

The sift will take place week commencing 19/10/2026.

Stage 2: Interview

At interview stage, you will be assessed against the following Success Profile elements:

• Behaviours • Making Effective Decisions
• Communicating and Influencing
• Working Together
• Delivering at Pace
• Experience

You will also be required to create and deliver a presentation to assess Experience and the Behaviour Making Effective Decisions. Guidance will be provided if you are invited to interview.

The interviews will take place week commencing 26/10/2026.

This interview will be conducted in person at our Southampton office (Spring Place, 105 Commercial Road, Southampton, SO15 5EG). Further details will be provided to you should you be selected for interview.

You can find out more about our hiring process, how to apply, and application and interview guidance on our careers site (opens in a new window) .

Please note that we will try to meet the dates set out in the advert. There may be occasions when these dates will change.

Further information on the selection process

Feedback on your application can only be provided if you attend an interview or assessment.

Adverts with a reserve list

We will also hold a 12 month reserve list for this role, which may lead to potential opportunities beyond the role you applied for. You can read more about our reserve lists here .

Appointments for this position will be made in order of merit. If you are successful in the selection process but there are no further available posts for the advertised role, you may be contacted to discuss an offer for a lower graded role (with similar experience and responsibility requirements).

Reasonable Adjustments

As a Disability Confident Leader employer, we are committed to ensuring that the recruitment process is fair, accessible and allows all candidates to perform at their best. If a person with a visible or non-visible disability is substantially disadvantaged, we have a duty to make reasonable changes to our processes.

Complete the “Assistance required” section in the “Additional requirements” page of your ap