ExeterPUBLISHED THU 2 JAN 2025

Band 8b: £82,879 to £93,980 a year (exclusive of London weighting) PERMANENT
NHS

NHS Englandr3l7347B

Attractive remuneration package including a Recruitment and Retention Premia (RRP) of 30% per annum, providing financial incentive.

Opportunity to work at the forefront of safeguarding critical national healthcare services, making a meaningful impact on patient safety.

Involvement in shaping and implementing cyber-resilient architectures that enhance the UK's healthcare systems.

Access to professional development opportunities within a supportive and innovative environment, allowing for continuous skill enhancement.

Collaboration with a diverse range of stakeholders and teams, fostering a culture of teamwork and shared knowledge.

The role provides a chance to tackle national-scale challenges and contribute to improving healthcare outcomes.

As a trusted advisor, you will have significant influence in the governance and security frameworks that protect sensitive patient data across the NHS.

The Cyber Security Lead position with NHS England in Leeds or Exeter offers a critical role within the Cyber Operations team, focusing on safeguarding national healthcare services through enhanced cyber resilience. This role, which includes a 30% annual payment as a Recruitment and Retention Premia, involves providing expert consultancy to develop cyber-resilient architectures, ensuring compliance with security frameworks, and embedding secure practices in system designs before they go live. Responsibilities also encompass threat modeling, risk mitigation, and collaboration with stakeholders to address security challenges, while representing the Cyber Operations team in governance forums.

Candidates for this position should be prepared to demonstrate expertise in security standards such as NIST, ISO 27001, and NCSC guidelines. The role not only affords opportunities to tackle national scale challenges impacting patient care but also offers a supportive environment for professional development. Additionally, applicants must meet specific residency requirements to obtain security clearance, having resided in the UK for three of the last five years.

Attractive remuneration package including a Recruitment and Retention Premia (RRP) of 30% per annum, providing financial incentive.

Opportunity to work at the forefront of safeguarding critical national healthcare services, making a meaningful impact on patient safety.

Involvement in shaping and implementing cyber-resilient architectures that enhance the UK's healthcare systems.

Access to professional development opportunities within a supportive and innovative environment, allowing for continuous skill enhancement.

Collaboration with a diverse range of stakeholders and teams, fostering a culture of teamwork and shared knowledge.

The role provides a chance to tackle national-scale challenges and contribute to improving healthcare outcomes.

As a trusted advisor, you will have significant influence in the governance and security frameworks that protect sensitive patient data across the NHS.

The post of Cyber Security Lead has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 30% per annum.

Please be aware that RRP is none contractual and subject to review.

NHS England's Cyber Operations team is at the forefront of safeguarding critical national healthcare services and ensuring patient safety through robust cyber resilience. The Cyber Security Lead role is a key part of the Security Consulting Team, operating within the Chief Information Security Office (CISO) function. This team provides specialist consultancy across NHS England, ensuring national services and Critical National Infrastructure are secure by design.

You will play a pivotal role in developing and implementing cyber-resilient architectures, providing expert advice and ensuring systems meet stringent security standards. Acting as a trusted advisor to project teams, you will embed secure practices into systems before they become live services, safeguarding data and operations across the NHS.

This role offers unparalleled opportunities to address challenges of national scale, contribute to improving healthcare outcomes, and enhance NHS cyber resilience. As part of a supportive and innovative environment, you will benefit from access to professional development, collaborative initiatives, and impactful work that directly supports patient care.

As a Cyber Security Lead, your responsibilities include:

Provide expert consultancy and guidance to ensure secure system design, governance, and compliance with frameworks like NIST Special Special Publications, ISO 27001/2/3, and NCSC guidelines.

Set and embed security standards and patterns, aligned with best practices, to strengthen NHS England's cyber resilience.
Lead threat modelling, security assessments, and risk mitigation efforts, delivering actionable advice to address identified vulnerabilities.
Collaborate with stakeholders and teams to address challenges via DevSecOps practices, security reviews, and comprehensive risk analysis.
Drive the development and implementation of NHS England's integrated cyber security strategy, defining objectives and addressing technical controls, risks, and issues.
Act as a trusted advisor and subject matter expert, representing Cyber Operations at governance forums and during project lifecycles.
Scope and review security testing reports, vulnerability assessments, and compliance audits to ensure robust application and endpoint security.
Provide architecture modelling expertise to design and implement resilient, secure systems and services across NHS England.
Support systems and services throughout their lifecycle, ensuring secure practices are maintained to minimise risks.

About us
Please see the attached Job Description and Person Specification for more information about the role and responsibilities.

Please ensure your supporting statement includes demonstratable evidence and specific examples on how you meet the criteria for each of the key skills specified. This will be used in both the shortlisting and interview processes

Important: Please be aware there are residency requirements you need to meet:

All NHS England Cyber Security personnel must hold security clearance SC level as a minimum.To meet National Security Vetting requirements,you must have resided in the UK for a minimum of 3 out of the past 5 years for SC clearance. Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered.

Please make sure you meet these requirements before applying for this role. You don't need to have SC already, however, failure to achieve the requirements for SC after offer, will result in the job offer being withdrawn.

More information related to this job opportunity, from jobsincare:

Possible interview questions for this job Click to view Start practice interview NEW!

Please wait...this will take a moment...

More about the NHS

The National Health Service (NHS) is a cornerstone of healthcare in the United Kingdom, established in 1948 with the simple yet profound principle of providing healthcare to all citizens, free at the point of use. This revolutionary system aimed to ensure that access to medical services would not depend on an individual’s financial situation, a concept that has since become fundamental to British societal values.Learn more...

Useful skills for a Cyber Security Lead: Click to view

To work as a Cyber Security Lead in the UK, you'll need a robust set of technical and soft skills, as well as relevant qualifications and experience. Here are some key areas to focus on:

Technical Skills

1. Network Security: Understand network protocols, firewall configurations, intrusion detection systems (IDS), and virtual private networks (VPNs).

2. Information Security Frameworks: Familiarity with frameworks such as ISO 27001, NIST Cybersecurity Framework, and GDPR.

3. Risk Management: Ability to assess and manage risks associated with information security and compliance.

4. Incident Response: Skills in identifying, responding to, and recovering from security incidents.

5. Security Auditing: Knowledge of how to conduct security audits and vulnerability assessments.

6. Penetration Testing: Experience with testing systems for vulnerabilities and potential breaches.

7. Cryptography: Understanding of encryption algorithms and how they protect data.

8. Security Operations: Experience with Security Information and Event Management (SIEM) tools to monitor and analyze security events.

9. Cloud Security: Knowledge of securing cloud environments (e.g., AWS, Azure, Google Cloud).

10. Programming/Scripting: Basic coding skills in languages like Python, Java, or PowerShell to automate tasks and analyze security data.

Soft Skills

1. Leadership: Ability to lead and manage a cybersecurity team effectively.

2. Communication: Strong verbal and written communication skills to convey security concepts to non-technical stakeholders.

3. Problem-Solving: Ability to think critically and creatively to address security issues and challenges.

4. Collaboration: Work effectively with other teams, including IT, compliance, and legal departments.

5. Project Management: Skills in managing projects, timelines, and deliverables associated with security initiatives.

Qualifications and Certifications

- Certifications: Consider obtaining certifications such as:

- Certified Information Systems Security Professional (CISSP)

- Certified Information Security Manager (CISM)

- Certified Ethical Hacker (CEH)

- CompTIA Security+

- Certified Information Systems Auditor (CISA)

- Education: A degree in computer science, information technology, or a related field is often preferred.

Experience

- Previous experience in a cybersecurity role, ideally with leadership responsibilities.

- A proven track record of managing security projects and initiatives.

- Experience in risk assessment and compliance.

Industry Knowledge

- Stay updated on current cybersecurity threats, trends, and technologies.

- Understanding of industry-specific regulations and compliance requirements that affect cybersecurity.

Cyber Security LeadinLeeds / ExeterinLeeds / ExeterPUBLISHED THU 2 JAN 2025

NHS EnglandFollow NHS Englandr3l7347B

Cyber Security LeadinLeeds / Exeter inLeeds / ExeterPUBLISHED THU 2 JAN 2025

NHS Englandr3l7347B