Date Posted:
2024-03-06
Country:
United Kingdom
Location:
GBR01:Harlow, Essex, Kao One, Kao Park, Harlow, CM17 9NA
Position Role Type:
Unspecified
Job Title: Information Assurance Analyst
Location: Harlow or Glenrothes (Hybrid working with up to 2 days a week on site).
The Department and Team
Raytheon UKs Digital Technologies (DT) department are responsible for supporting and enabling the wider business in the delivery of its core services - supporting Raytheon UK to successfully enable collaboration, operational activities, and business delivery.
The Cyber Security team operate within the DT function - providing subject matter expertise support, governance and assurance, as well as technical security services to the function, and wider UK business. Ultimately working to ensure the ongoing security of Raytheon UKs critical systems and services.
The Role
Sitting with the Cyber Security Team, the IT Security Compliance Analyst play a critical role in ensuring that Raytheon UK remain compliant with a range of internal and external security accreditations, standards and control sets.
Alongside these responsibilities, the Information Assurance Analysts will help to:
* Advise and drives technical security best practises through routine and ad-hoc audit and governance activities.
* Identify areas of noncompliance and risk, ultimately supporting the development of appropriate remediation plans and activities.
* Drive security improvements and uplift across the department through managing post audit remediation plans and actions.
Duties and Responsibilities
Main duties and responsibilities:
* Plan, co-ordinate, and conduct a range of internal assessments against Raytheon's existing infrastructure and applications, ensuring that audit reports are provided to the UK Digital Technologies Leadership teams, and the wider US Compliancy teams in a timely manner.
* Identify security observations and risks during audits and assessments, as well as across broader day to day activities, ensuring that these are centrally documented - and all key stakeholders are informed.
* Alongside supporting internal and external audits, and capturing security observations and risks, the Information Assurance Analyst will work with the wider Cyber Security Team to develop remediation recommendations and plans, for the service and system owners.
* Providing Subject Matter Expertise (SME) support to service and system owners across the organisations, to ensure that remediation plans are appropriate to address non-compliances. Ultimately working closely with these owners, to ensure remediation actions are undertaken in a timely manner.
* Support and manage the planning, co-ordination, and completion of work in support of maintaining the organisations Cyber Essentials, and Cyber Essentials Plus certifications.
* Promote the visibility of Raytheon UKs security audit requirements, audit timetable and commitments, and areas of non-conformity are known to all stakeholders across the Digital Technologies team, and its leadership function.
* Ensure that areas of risk, non-conformity, and future compliance challenges are identified at the earliest possibility. Working with the wider Information Assurance team to ensure that all key stakeholders are made aware, and suitable mitigations are developed to address these.
* Ensure that responses and findings from audits are briefed to key stakeholders, and where appropriate, that these are fed into the security and departments risk register for ongoing monitoring.
* Routinely monitor the departments Service Managed System (Cherwell), supporting the response and triage to requests pertaining to Information Assurance activities from across the department and wider business.
Candidate Requirement
* Self-starter with ability to prioritise own workload, and work to tight deadlines.
* Previous experience of audit and compliance activities.
* Ability to obtain and maintain UK Security clearance.
* Strong communication and networking skills.
* Strong research and analysis skills.
* Accuracy and a high level of attention to detail.
RTX is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.
Privacy Policy and Terms:
Click on this link to read the Policy and Terms #J-18808-Ljbffr