UK Information Assurance Practitioner

Northrop Grumman UK; Cheltenham; Hybrid; GBP 52,000 - 70,000; Full time

Benefits offered by this job

Flexible hybrid arrangements

Private healthcare

Pension

Annual learning and development

Career progression

Job summary

Northrop Grumman UK is seeking an Information Assurance Practitioner to join the Information Security team in Cheltenham. This hybrid role (3 days onsite) involves protecting business and customer information, supporting certification activities and embedding security throughout project lifecycles.

You will influence security strategy, shape policy and drive improvements across major programmes while collaborating with stakeholders and ensuring regulatory compliance.

Qualifications

• Experience in information assurance, cyber security or information security environments.
• Familiarity with information security legislation, governance and compliance requirements.
• Knowledge of ISO 27001, NIST 800-171, NCSC CAF v3 and CSM v4 frameworks.
• Experience developing policies, standards and procedures to support compliance and assurance objectives.
• Excellent communication with stakeholders and strong attention to detail.

Responsibilities

• Provide expert advice on information assurance activities and risk management.
• Conduct information risk assessments and risk treatment planning.
• Support security certification activities and drive improvements.
• Develop and maintain security policies, standards and procedures.
• Advise on implementation and operation of security controls.
• Support audits and delivery of major programmes.

Skills

Information assurance

Risk management

Security governance

Policy development

Stakeholder communication

Audits and compliance

Education

Degree or equivalent

Job description

UK citizenship required for this position: Yes

Relocation assistance: No relocation assistance available

Travel: Yes, 10% of the Time

Information Assurance Practitioner

Location: Cheltenham (hybrid, 3 days onsite)

Clearance Type: SC Clearance (or ability to obtain)

Salary: £52,000 - £70,000

At Northrop Grumman UK, you are part of a team driving innovation where it matters most, solving tomorrow's challenges and shaping the technology solutions of the future. We call it Defining Possible.

This mindset goes beyond our customer solutions. It's the foundation for your career development and the impact we have within the community.

This is more than just a job. It's a mission.

We're looking for an Information Assurance Practitioner to join our Information Security team in Cheltenham. Reporting to the UK Information Assurance Lead, you will play a key role in protecting our business, customer information and critical programmes while enabling innovation and supporting growth across Northrop Grumman UK.

This is a hands-on opportunity for someone passionate about information security, risk management and security assurance. You'll work closely with stakeholders across the business, providing expert guidance, supporting certification activities and helping ensure security is embedded throughout the project lifecycle.

You'll have the opportunity to influence security strategy, shape policy and drive meaningful improvements that protect some of the UK's most important programmes and capabilities.

What You'll Do

• Provide expert advice and guidance on information assurance activities, strategies and risk management approaches.
• Conduct information risk assessments, gap analyses and risk treatment planning across projects and programmes.
• Support security certification activities and drive continuous improvement initiatives.
• Develop and maintain security policies, standards and procedures aligned to recognised frameworks and regulatory requirements.
• Advise on the implementation and operation of physical, procedural and technical security controls.
• Support internal and external audits while contributing to successful delivery of major organisational programmes and objectives.

What We're Looking For

We're interested in people who bring a combination of technical knowledge, security expertise and a collaborative approach.

Essential Experience And Knowledge

• Experience working within information assurance, cyber security or information security environments.
• Familiarity with information security legislation, governance and compliance requirements.
• Knowledge of ISO 27001, NIST 800-171, NCSC CAF v3 and CSM v4 frameworks.
• Experience developing policies, standards and procedures to support compliance and assurance objectives.
• Excellent communication skills with the ability to influence stakeholders and present recommendations clearly.
• Strong planning, organisational and problem-solving skills with excellent attention to detail.

Desirable Experience

• Knowledge of Secure by Design principles.
• Experience of MOD Supply Chain Assurance processes.
• Knowledge of supply chain assurance frameworks, including ISO 28001.
• Understanding of Commercial Off-The-Shelf (COTS) assurance activities.
• Degree-level qualification or equivalent relevant experience.

Most importantly, we're looking for individuals who are passionate about protecting information, people and organisations, and who thrive in a fast-paced, collaborative environment.

Even if you don't meet every requirement listed, we'd still love to hear from you. Your experience, potential and perspective could make you a great addition to our team.

Security Clearance

Due to the nature of our work, you must be a UK national and able to gain and maintain UK Government security clearance in line with the job role and requirements.

Benefits

• Flexible working options, including hybrid arrangements and compressed fortnights with every other Friday off
• Private healthcare, dental cover, life assurance and pension
• Flexible benefits package, including critical illness cover and health cash plan
• Holiday buy and sell scheme
• Career development and learning programmes
• Annual performance incentive programme

Why Join Northrop Grumman UK?

A Mission to Believe In

Every day, our teams contribute to building a more secure and connected world. You'll work on meaningful programmes, collaborate with talented colleagues and have opportunities to get involved with employee networks and STEM volunteering initiatives.

A Place to Belong and Thrive

We believe innovation comes from diverse perspectives and experiences. Every voice matters, and we're committed to creating an inclusive environment where everyone can do their best work.

Your Career, Your Way

Whether you're deepening your technical expertise, developing leadership capability or exploring new opportunities across the business, we'll support your growth with mentoring, development programmes and diverse career pathways.

Northrop Grumman is committed to hiring and retaining a diverse workforce, and encourages individuals from all backgrounds and all abilities to apply and consider becoming a part of our diverse and inclusive workforce.