Information & Reporting Analyst in Essex, Harlow

Location: Gloucester or Manchester preferred. Harlow, Glenrothes, Livingston

Security Clearance Required: SC

Benefits:

• 25 days holiday + statutory public holidays, plus opportunity to buy and sell up to 5 days (37hr)
• Contributory Pension Scheme (up to 10.5% company contribution)
• Company bonus scheme (discretionary)
• 6 times salary ‘Life Assurance’ with pension
• Flexible Benefits scheme with extensive salary sacrifice schemes, including Health Cashplan, Dental, and Cycle to Work amongst others
• Enhanced sick pay
• Enhanced family friendly policies including enhanced maternity, paternity & shared parental leave

As an employer, we are dedicated to fuelling innovation, nurturing talent, and fostering a culture of excellence. We provide a collaborative environment, abundant opportunities for professional development, and a profound sense of purpose in what we do.

The Information Assurance Analyst will help to:

• Advise and drive technical security best practices through routine and ad-hoc audit and governance activities.
• Identify areas of noncompliance and risk, ultimately supporting the development of appropriate remediation plans and activities.
• Have practical experience within information security, cyber security, information assurance, IT risk, governance, risk and compliance (GRC), or technology audit.
• Possess working knowledge of ISO27001, including an understanding of Information Security Management Systems (ISMS), risk-based approaches to security and the assessment of security controls.
• Be familiar with the NIST Cybersecurity Framework (CSF) and understand how security frameworks can be used to assess and improve an organisation's security posture.
• Experience identifying and documenting security risks, control deficiencies and non-conformities, and supporting their remediation.
• Understand common enterprise security controls and technologies, including identity and access management, vulnerability management, endpoint security, network security, secure configuration, logging and monitoring, data protection and incident management.
• Exhibit strong written and verbal communication skills, with the ability to communicate security risks and requirements effectively to technical and non-technical stakeholders.
• Be self-motivated and able to manage and prioritise multiple activities, stakeholders and deadlines with appropriate levels of supervision.
• Have the ability to obtain and maintain the required UK Security Clearance.

The Information Security Analyst will support the organisation in maintaining and continually improving its information security and assurance posture. Responsibilities include:

• Plan, coordinate and conduct security assessments and assurance reviews across the organisation's infrastructure, applications, services and supporting processes.
• Support the organisation's alignment with recognised security standards and frameworks, including ISO27001 and the NIST Cybersecurity Framework (CSF).
• Identify security risks, control weaknesses, observations and non-conformities through assessments, audits and day-to-day assurance activities.
• Develop clear, pragmatic remediation recommendations in collaboration with the wider Cyber Security team, service owners, system owners and other stakeholders.
• Provide subject matter expertise and security assurance guidance to service and system owners.
• Monitor and challenge remediation activity, ensuring security findings and risks are addressed appropriately.
• Support the planning, coordination and delivery of activities required to maintain Cyber Essentials and Cyber Essentials Plus certification.
• Ensure that security risks, areas of non-conformity and emerging compliance challenges are identified at the earliest opportunity.
• Communicate significant audit and assessment findings effectively to relevant stakeholders.
• Contribute to the continual improvement of the organisation's information security management and assurance processes.
• Maintain awareness of developments in cyber security threats, regulation, industry standards and security good practice.

RTX provides advanced systems and services for commercial, military and government customers worldwide and comprises three industry-leading businesses - Collins Aerospace Systems, Pratt & Whitney, and Raytheon.

Supporting over 35,000 jobs across 13 UK sites, RTX is helping to drive prosperity. All qualified applications will be given careful consideration without regard to ethnicity, colour, religion, gender, sexual orientation or identity, national origin, age, disability, protected veteran status or any other characteristic protected by law.