Information Assurance Analyst

Date posted:

Country:
United Kingdom

Location:

Gloucester, South Gloucestershire

Position Role Type:
Hybrid

Role

Information Assurance Analyst

Function:
Digital Technology

Location:

Gloucester or Manchester preferred. Other options include:
Harlow, Glenrothes, Livingston

Security

Clearance Required:

SC

For further information on security clearances please visit this website:
National security vetting: clearance levels -

Duration:
Full time

Hours:

37hrs Dayshift

• Competitive salaries.
• 25 days holiday + statutory public holidays, plus opportunity to buy and sell up to 5 days (37hr)
• Contributory Pension Scheme (up to 10.5% company contribution)
• Company bonus scheme (discretionary).
• 6 times salary ‘Life Assurance’ with pension.
• Flexible Benefits scheme with extensive salary sacrifice schemes, including Health Cashplan, Dental, and Cycle to Work amongst others.
• Enhanced sick pay.
• Enhanced family friendly policies including enhanced maternity, paternity & shared parental leave.

At Raytheon UK, we take immense pride in being a leader in defence and aerospace technology. As an employer, we are dedicated to fuelling innovation, nurturing talent, and fostering a culture of excellence. Joining our team means being part of an organisation that shapes the future of national security whilst investing in your growth and personal development. We provide a collaborative environment, abundant opportunities for professional development, and a profound sense of purpose in what we do.

Together, we are not just advancing technology; we're building a community committed to safeguarding a safer and more connected world.

Sitting with the Cyber Security Team, the IT Security Compliance Analyst play a critical role in ensuring that Raytheon UK remain compliant with a range of internal and external security accreditations, standards and control sets.

Alongside these responsibilities, the Information Assurance Analysts will help to:

• Advise and drives technical security best practises through routine and ad-hoc audit and governance activities.
• Identify areas of noncompliance and risk, ultimately supporting the development of appropriate remediation plans and activities.
• Drive security improvements and uplift across the department through managing post audit remediation plans and actions.

• Practical experience within information security, cyber security, information assurance, IT risk, governance, risk and compliance (GRC), or technology audit.
• Working knowledge of ISO
  27001, including an understanding of Information Security Management Systems (ISMS), risk-based approaches to security and the assessment of security controls.
• Familiarity with the NIST Cybersecurity Framework (CSF, with an understanding of how security frameworks can be used to assess and improve an organisation's security posture.
• Experience supporting or conducting security audits, compliance assessments, control assessments or assurance reviews.
• Experience identifying and documenting security risks, control deficiencies and non-conformities, and supporting their remediation.
• Ability to analyse security requirements and control evidence and form clear, evidence-based conclusions and recommendations.
• An understanding of common enterprise security controls and technologies, including areas such as identity and access management, vulnerability management, endpoint security, network security, secure configuration, logging and monitoring, data protection and incident management.
• Strong written and verbal communication skills, with the ability to communicate security risks and requirements effectively to technical and non-technical stakeholders.
• Strong analytical, research and…