Information Assurance Analyst

In this role you will help Raytheon UK sustain and improve its information security and assurance posture. You will work within the Cyber Security Team to assess, govern, and remediate security controls across technology services and processes. You will engage with stakeholders to translate risk into concrete actions, supporting audits and certifications. The opportunity focuses on safeguarding national security while enabling secure, compliant operations at scale.

• Competitive salaries
• 25 days holiday + public holidays + buy/sell up to 5 days
• Contributory Pension Scheme (up to 10.5% company contribution)
• Discretionary bonus scheme
• Life Assurance (6x salary) with pension
• Flexible Benefits including Health Cashplan, Dental, Cycle to Work

• Plan, coordinate and conduct security assessments and assurance reviews across infrastructure, applications, and processes
• Support alignment with security standards and frameworks (ISO27001, CSF) and evidencing controls
• Identify risks, control weaknesses, and non-conformities; document, prioritise and track remediation
• Assess design and effectiveness of security controls; gather evidence and recommend improvements
• Develop pragmatic remediation recommendations with stakeholders
• Provide security assurance guidance to service and system owners
• Monitor remediation activity and escalate overdue or significant risks
• Support internal and external audits and assessments; manage findings and actions
• Coordinate Cyber Essentials and Cyber Essentials Plus certification activities
• Communicate security risks and findings to diverse audiences; contribute to risk registers and reporting
• Contribute to continual improvement of information security management and assurance processes
• Maintain awareness of cyber security threats, regulation, and good practice

• Practical experience in information security, cyber security, information assurance, IT risk, GRC, or technology audit
• Working knowledge of ISO27001 and ISMS concepts
• Understanding of NIST CSF and its application for improving security posture
• Experience supporting or conducting security audits and assurance reviews
• Ability to document and recommend remediation for risks and control gaps
• Knowledge of enterprise security controls (IAM, vulnerability; endpoint; network; logging; data protection)
• Strong written and verbal communication for technical and non-technical audiences
• Strong analytical and problem-solving skills; attention to detail
• Ability to manage multiple activities and stakeholders with minimal supervision
• Ability to obtain and maintain UK Security Clearance

• Strong communication with technical and non-technical stakeholders
• Analytical mindset with attention to detail
• Ability to challenge stakeholders when requirements are not met
• ISO27001/ISMS
• NIST Cybersecurity Framework (CSF)
• Security audits and assurance