Information Assurance Practitioner

Northrop Grumman UK; Cheltenham; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Flexible working

Hybrid work

Private healthcare

Pension

Career development

Annual incentive

Job summary

Northrop Grumman UK is seeking an Information Assurance Practitioner in Cheltenham to protect our business, customer information and critical programmes while enabling innovation.

Join a collaborative team, reporting to the UK Information Assurance Lead, and help shape security strategy, policies and certification activities across major programmes in a hybrid work environment.

Qualifications

• Experience in information assurance, cyber security or information security environments.
• Familiarity with information security legislation, governance and compliance requirements.
• Knowledge of ISO 27001, NIST 800-171, NCSC CAF v3 and CSM v4 frameworks.
• Experience developing policies, standards and procedures to support compliance and assurance objectives.
• Excellent communication skills with the ability to influence stakeholders and present recommendations clearly.
• Strong planning, organisational and problem-solving skills with excellent attention to detail.

Responsibilities

• Provide expert advice on information assurance activities, strategies and risk management approaches.
• Conduct information risk assessments, gap analyses and risk treatment planning across projects and programmes.
• Support security certification activities and drive continuous improvement initiatives.
• Develop and maintain security policies, standards and procedures aligned to recognised frameworks and regulatory requirements.
• Advise on the implementation and operation of physical, procedural and technical security controls.
• Support internal and external audits while contributing to successful delivery of major organisational programmes and objectives.

Skills

Information security

Information assurance

Risk management

Policy development

Stakeholder engagement

Tools

ISO 27001

NIST 800-171

NCSC CAF v3

CSM v4

Job description

Location: Cheltenham (hybrid, 3 days onsite)

Clearance Type: SC Clearance (or ability to obtain)

What's your possible?

At Northrop Grumman UK, you are part of a team driving innovation where it matters most, solving tomorrow's challenges and shaping the technology solutions of the future. We call it Defining Possible.

This mindset goes beyond our customer solutions. It's the foundation for your career development and the impact we have within the community.

This is more than just a job. It's a mission.

We're looking for an Information Assurance Practitioner to join our Information Security team in Cheltenham. Reporting to the UK Information Assurance Lead, you will play a key role in protecting our business, customer information and critical programmes while enabling innovation and supporting growth across Northrop Grumman UK.

This is a hands-on opportunity for someone passionate about information security, risk management and security assurance. You'll work closely with stakeholders across the business, providing expert guidance, supporting certification activities and helping ensure security is embedded throughout the project lifecycle.

You'll have the opportunity to influence security strategy, shape policy and drive meaningful improvements that protect some of the UK's most important programmes and capabilities.

What You'll Do

As an Information Assurance Practitioner, you will:

• Provide expert advice and guidance on information assurance activities, strategies and risk management approaches.
• Conduct information risk assessments, gap analyses and risk treatment planning across projects and programmes.
• Support security certification activities and drive continuous improvement initiatives.
• Develop and maintain security policies, standards and procedures aligned to recognised frameworks and regulatory requirements.
• Advise on the implementation and operation of physical, procedural and technical security controls.
• Support internal and external audits while contributing to successful delivery of major organisational programmes and objectives.

What We're Looking For

We're interested in people who bring a combination of technical knowledge, security expertise and a collaborative approach.

Essential experience and knowledge:

• Experience working within information assurance, cyber security or information security environments.
• Familiarity with information security legislation, governance and compliance requirements.
• Knowledge of ISO 27001, NIST 800-171, NCSC CAF v3 and CSM v4 frameworks.
• Experience developing policies, standards and procedures to support compliance and assurance objectives.
• Excellent communication skills with the ability to influence stakeholders and present recommendations clearly.
• Strong planning, organisational and problem-solving skills with excellent attention to detail.
• Knowledge of Secure by Design principles.
• Experience of MOD Supply Chain Assurance processes.
• Knowledge of supply chain assurance frameworks, including ISO 28001.
• Understanding of Commercial Off-The-Shelf (COTS) assurance activities.

Most importantly, we're looking for individuals who are passionate about protecting information, people and organisations, and who thrive in a fast-paced, collaborative environment.

Even if you don't meet every requirement listed, we'd still love to hear from you. Your experience, potential and perspective could make you a great addition to our team.

Security Clearance

Due to the nature of our work, you must be a UK national and able to gain and maintain UK Government security clearance in line with the job role and requirements.

We offer a flexible and rewarding benefits package designed to support your wellbeing, career and lifestyle, including:

• Flexible working options, including hybrid arrangements and compressed fortnights with every other Friday off
• Private healthcare, dental cover, life assurance and pension
• Flexible benefits package, including critical illness cover and health cash plan
• Holiday buy and sell scheme
• Career development and learning programmes
• Annual performance incentive programme

Why Join Northrop Grumman UK?

A Mission to Believe In

Every day, our teams contribute to building a more secure and connected world. You'll work on meaningful programmes, collaborate with talented colleagues and have opportunities to get involved with employee networks and STEM volunteering initiatives.

A Place to Belong and Thrive

We believe innovation comes from diverse perspectives and experiences. Every voice matters, and we're committed to creating an inclusive environment where everyone can do their best work.

Whether you're deepening your technical expertise, developing leadership capability or exploring new opportunities across the business, we'll support your growth with mentoring, development programmes and diverse career pathways.