Information Security Practitioner

BAE Systems; Preston; Hybrid; GBP 45,000 - 60,000; Full time

Job summary

A leading defense, security, and aerospace company is seeking an Information Security Practitioner in the UK. The role involves responding to audits, coordinating with partners, and improving information security frameworks. Ideal candidates will have experience with sensitive data, GDPR policies, and BI tools like Tableau and PowerBI. Competitive benefits include pension schemes and health plans. The position offers flexible working arrangements in various locations, including Preston.

Benefits

Competitive pension scheme

Employee share plans

Flexible discounted health benefits

Green car scheme

Private health plans

Shopping discounts

Potential for an annual incentive

Qualifications

• Hands on experience of dealing with sensitive data.
• Knowledge and experience of GDPR and Global Data Protection Policies.
• Knowledge of BI tools (Tableau, PowerBI).
• Experience of ETL/Data Integration patterns.
• Data Management /Data Governance experience.
• Experience or knowledge of Azure Cloud.
• Relevant certifications like TOGAF, NIST, ITIL, ISO27001.

Responsibilities

• Respond to and coordinate internal audits or security assessments.
• Attend and schedule meetings with business partners.
• Provide advice supported by existing organisational policies.
• Produce and maintain documentation related to information security.
• Respond to information security queries.
• Produce and communicate security improvement roadmaps.
• Perform administrative tasks related to access and approvals.
• Work towards improving the information security framework.

Skills

Hands on experience of dealing with sensitive data

Knowledge and experience of GDPR

Knowledge of BI tools (Tableau, PowerBI)

Experience of ETL/Data Integration patterns

Data Management/Data Governance experience

Experience or knowledge of Azure Cloud

TOGAF, NIST, ITIL, ISO27001, DAMA Certification

Job description

Job Description - Information Security Practitioner (00133496)

Information Security Practitioner - 00133496

Job Title: Information Security Practitioner

Location: Preston, Frimley, Portsmouth, Glascoed, Barrow or Glasgow. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role

What you’ll be doing:

• Respond to and coordinate internal audits or security assessments related to Data and Analytics (D&A) systems and assets
• Attend and schedule meetings with business partners ranging from the wider team within D&A, to enterprise architects and cyber security
• Actively provide informed advice and recommendations supported by existing organisational polices, standards, procedures and guidance
• Produce and maintain documentation related to information security within D&A
• Respond to information security related queries, providing knowledgeable insights or taking the action to investigate the correct course of action
• Produce and communicate roadmaps related to planned information security improvement
• Carry out administrative tasks related to access and approvals
• Continually work towards improving the information security framework within D&A

Your skills and experiences:

• Hands on experience of dealing with sensitive data
• Knowledge and experience of GDPR and Global Data Protection Policies
• Knowledge and awareness of BI tools (Tableau, PowerBI)
• Experience of ETL/Data Integration patterns
• Data Management /Data Governance experience
• Experience or knowledge of Azure Cloud
• TOGAF, NIST, ITIL, ISO27001, DAMA Certification

As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible discounted health, wellbeing and lifestyle benefits, including a green car scheme, private health plans and shopping discounts - you may also be eligible for an annual incentive.

The Data & Analytics team:

The Data & Analytics Shared Service Team is at the heart of our company data landscape, bringing together data from our global operations and generating a broad range of insights to inform key business decisions.

Working closely with EIT and Cyber Security ensuring compliance and regularly assessing controls against GCSS. The team complete assessments for each platform within D&A supporting audits from Data Protection and other legal business units whilst maintaining documentation and verifying compliance on an ongoing basis.

Why BAE Systems?

This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc .) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments.

Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks.

Closing Date: 27th February 2026

We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible.