IT & Reporting Analyst in Essex, Harlow

Location: Gloucester or Manchester preferred. Harlow, Glenrothes, Livingston

Security Clearance Required: SC

Benefits:

• 25 days holiday + statutory public holidays, plus opportunity to buy and sell up to 5 days (37hr)
• Contributory Pension Scheme (up to 10.5% company contribution)
• Company bonus scheme (discretionary)
• 6 times salary ‘Life Assurance’ with pension
• Flexible Benefits scheme with extensive salary sacrifice schemes, including Health Cashplan, Dental, and Cycle to Work amongst others
• Enhanced sick pay
• Enhanced family friendly policies including enhanced maternity, paternity & shared parental leave

As an employer, we are dedicated to fuelling innovation, nurturing talent, and fostering a culture of excellence. We provide a collaborative environment, abundant opportunities for professional development, and a profound sense of purpose in what we do.

The IT Security Compliance Analyst plays a critical role in ensuring that Raytheon UK remains compliant with a range of internal and external security accreditations, standards and control sets. Responsibilities include:

• Advising and driving technical security best practices through routine and ad-hoc audit and governance activities.
• Identifying areas of noncompliance and risk, ultimately supporting the development of appropriate remediation plans and activities.
• Practical experience within information security, cyber security, information assurance, IT risk, governance, risk and compliance (GRC), or technology audit.
• Working knowledge of ISO27001, including an understanding of Information Security Management Systems (ISMS), risk-based approaches to security and the assessment of security controls.
• Familiarity with the NIST Cybersecurity Framework (CSF), with an understanding of how security frameworks can be used to assess and improve an organisation's security posture.
• Experience identifying and documenting security risks, control deficiencies and non-conformities, and supporting their remediation.
• An understanding of common enterprise security controls and technologies, including areas such as identity and access management, vulnerability management, endpoint security, network security, secure configuration, logging and monitoring, data protection and incident management.
• Strong written and verbal communication skills, with the ability to communicate security risks and requirements effectively to technical and non-technical stakeholders.
• Self-motivated and able to manage and prioritise multiple activities, stakeholders and deadlines with appropriate levels of supervision.
• Ability to obtain and maintain the required UK Security Clearance.

The Information Security Analyst will support the organisation in maintaining and continually improving its information security and assurance posture. Key tasks include:

• Planning, coordinating and conducting security assessments and assurance reviews across the organisation's infrastructure, applications, services and supporting processes.
• Supporting the organisation's alignment with recognised security standards and frameworks, including ISO27001 and the NIST Cybersecurity Framework (CSF).
• Identifying security risks, control weaknesses, observations and non-conformities through assessments, audits and day-to-day assurance activities.
• Developing clear, pragmatic remediation recommendations in collaboration with the wider Cyber Security team, service owners, system owners and other stakeholders.
• Providing subject matter expertise and security assurance guidance to service and system owners.
• Monitoring and challenging remediation activity, working with action owners to ensure security findings and risks are addressed appropriately.
• Supporting the planning, coordination and delivery of activities required to maintain Cyber Essentials and Cyber Essentials Plus certification.
• Ensuring that security risks, areas of non-conformity and emerging compliance challenges are identified at the earliest opportunity.
• Communicating significant audit and assessment findings effectively to relevant stakeholders.
• Contributing to the continual improvement of the organisation's information security management and assurance processes.
• Maintaining awareness of developments in cyber security threats, regulation, industry standards and security good practice.

RTX provides advanced systems and services for commercial, military and government customers worldwide and comprises three industry-leading businesses - Collins Aerospace Systems, Pratt & Whitney, and Raytheon.

All qualified applications will be given careful consideration without regard to ethnicity, colour, religion, gender, sexual orientation or identity, national origin, age, disability, protected veteran status or any other characteristic protected by law.