Info Assurance Practitioner – UK (SC) Hybrid

Northrop Grumman UK; Cheltenham; Hybrid; GBP 52,000 - 70,000; Full time

Benefits offered by this job

Flexible hybrid arrangements

Private healthcare

Pension

Annual learning and development

Career progression

Job summary

Northrop Grumman UK is seeking an Information Assurance Practitioner to join the Information Security team in Cheltenham. This hybrid role (3 days onsite) involves protecting business and customer information, supporting certification activities and embedding security throughout project lifecycles.

You will influence security strategy, shape policy and drive improvements across major programmes while collaborating with stakeholders and ensuring regulatory compliance.

Qualifications

• Experience in information assurance, cyber security or information security environments.
• Familiarity with information security legislation, governance and compliance requirements.
• Knowledge of ISO 27001, NIST 800-171, NCSC CAF v3 and CSM v4 frameworks.
• Experience developing policies, standards and procedures to support compliance and assurance objectives.
• Excellent communication with stakeholders and strong attention to detail.

Responsibilities

• Provide expert advice on information assurance activities and risk management.
• Conduct information risk assessments and risk treatment planning.
• Support security certification activities and drive improvements.
• Develop and maintain security policies, standards and procedures.
• Advise on implementation and operation of security controls.
• Support audits and delivery of major programmes.

Skills

Information assurance

Risk management

Security governance

Policy development

Stakeholder communication

Audits and compliance

Education

Degree or equivalent

Job description

Northrop Grumman UK is seeking an Information Assurance Practitioner to join the Information Security team in Cheltenham. This hybrid role (3 days onsite) involves protecting business and customer information, supporting certification activities and embedding security throughout project lifecycles.

You will influence security strategy, shape policy and drive improvements across major programmes while collaborating with stakeholders and ensuring regulatory compliance.