LondonPUBLISHED THU 2 JAN 2025

Band 8b: £82,879 to £93,980 a year (exclusive of London weighting) PERMANENT
NHS

NHS Englandr3l7347B

Impactful Role, Directly contribute to the security of critical national healthcare services, addressing challenges of national scale and improving healthcare outcomes.

Professional Development, Access to continuous learning opportunities and professional development in a rapidly evolving field.

Collaborative Environment, Work within a supportive team that fosters innovation and collaboration, enhancing overall job satisfaction.

Trust and Influence, Act as a trusted advisor to various project teams, allowing you to influence security practices across NHS England.

Focus on Cyber Resilience, Lead initiatives that significantly enhance NHS England's cyber resilience, contributing to the safeguarding of patient data and operational integrity.

Diverse Responsibilities, Engage in a range of activities from threat modelling to security assessments, ensuring a dynamic and varied work experience.

Reputable Organization, Be part of NHS England, a respected organization known for its commitment to patient care and safety.

The Cyber Security Lead role at NHS England is a crucial position within the Cyber Operations team, part of the Chief Information Security Office (CISO), focused on enhancing cyber resilience to protect national healthcare services. This role involves providing expert consultancy to ensure secure system designs, governance compliance, and adherence to standards such as NIST and ISO frameworks. The Cyber Security Lead will lead threat modeling, security assessments, and risk mitigation efforts while collaborating with stakeholders to implement DevSecOps practices and comprehensive risk analyses. Additionally, the role requires the development of an integrated cyber security strategy, representation in governance forums, and ongoing support for secure practices throughout system lifecycles.

Successful candidates will have the opportunity to make a significant impact on national healthcare outcomes while working in a supportive and innovative environment. They will be expected to provide evidence of their expertise in security standards and practices in their application. Importantly, candidates must meet specific residency requirements for security clearance, having resided in the UK for at least three out of the past five years.

Impactful Role, Directly contribute to the security of critical national healthcare services, addressing challenges of national scale and improving healthcare outcomes.

Professional Development, Access to continuous learning opportunities and professional development in a rapidly evolving field.

Collaborative Environment, Work within a supportive team that fosters innovation and collaboration, enhancing overall job satisfaction.

Trust and Influence, Act as a trusted advisor to various project teams, allowing you to influence security practices across NHS England.

Focus on Cyber Resilience, Lead initiatives that significantly enhance NHS England's cyber resilience, contributing to the safeguarding of patient data and operational integrity.

Diverse Responsibilities, Engage in a range of activities from threat modelling to security assessments, ensuring a dynamic and varied work experience.

Reputable Organization, Be part of NHS England, a respected organization known for its commitment to patient care and safety.

NHS England's Cyber Operations team is at the forefront of safeguarding critical national healthcare services and ensuring patient safety through robust cyber resilience. The Cyber Security Lead role is a key part of the Security Consulting Team, operating within the Chief Information Security Office (CISO) function. This team provides specialist consultancy across NHS England, ensuring national services and Critical National Infrastructure are secure by design.

You will play a pivotal role in developing and implementing cyber-resilient architectures, providing expert advice and ensuring systems meet stringent security standards. Acting as a trusted advisor to project teams, you will embed secure practices into systems before they become live services, safeguarding data and operations across the NHS.

This role offers unparalleled opportunities to address challenges of national scale, contribute to improving healthcare outcomes, and enhance NHS cyber resilience. As part of a supportive and innovative environment, you will benefit from access to professional development, collaborative initiatives, and impactful work that directly supports patient care.

As a Cyber Security Lead, your responsibilities include:

Provide expert consultancy and guidance to ensure secure system design, governance, and compliance with frameworks like NIST Special Special Publications, ISO 27001/2/3, and NCSC guidelines.

Set and embed security standards and patterns, aligned with best practices, to strengthen NHS England's cyber resilience.

Lead threat modelling, security assessments, and risk mitigation efforts, delivering actionable advice to address identified vulnerabilities.

Collaborate with stakeholders and teams to address challenges via DevSecOps practices, security reviews, and comprehensive risk analysis.

Drive the development and implementation of NHS England's integrated cyber security strategy, defining objectives and addressing technical controls, risks, and issues.

Act as a trusted advisor and subject matter expert, representing Cyber Operations at governance forums and during project lifecycles.

Scope and review security testing reports, vulnerability assessments, and compliance audits to ensure robust application and endpoint security.

Provide architecture modelling expertise to design and implement resilient, secure systems and services across NHS England.

Support systems and services throughout their lifecycle, ensuring secure practices are maintained to minimise risks.

About us
Please see the attached Job Description and Person Specification for more information about the role and responsibilities.

Please ensure your supporting statement includes demonstratable evidence and specific examples on how you meet the criteria for each of the key skills specified. This will be used in both the shortlisting and interview processes

Important: Please be aware there are residency requirements you need to meet:

All NHS England Cyber Security personnel must hold security clearance SC level as a minimum.To meet National Security Vetting requirements,you must have resided in the UK for a minimum of 3 out of the past 5 years for SC clearance. Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered.

Please make sure you meet these requirements before applying for this role. You don't need to have SC already, however, failure to achieve the requirements for SC after offer, will result in the job offer being withdrawn.

More information related to this job opportunity, from jobsincare:

Here are 5 questions you could be asked if you apply for this job: Start practice interview... NEW!

1. Can you describe your experience with the NIST Special Publications and how you have applied these frameworks in previous roles?

2. What strategies would you use to implement ISO 27001 compliance across an organisation like NHS England?

3. How do you ensure that security standards are not only set but also adhered to by project teams throughout the project lifecycle?

4. Can you provide an example of a time when you conducted a security assessment? What were the key findings and how did you address them?

5. Could you elaborate on your approach to threat modelling and how you've successfully utilised it to mitigate risks in prior projects?

See all questions

1. Can you describe your experience with the NIST Special Publications and how you have applied these frameworks in previous roles?

2. What strategies would you use to implement ISO 27001 compliance across an organisation like NHS England?

3. How do you ensure that security standards are not only set but also adhered to by project teams throughout the project lifecycle?

4. Can you provide an example of a time when you conducted a security assessment? What were the key findings and how did you address them?

5. Could you elaborate on your approach to threat modelling and how you've successfully utilised it to mitigate risks in prior projects?

Start a practice interview... NEW!

More about the NHS

The National Health Service (NHS) is a cornerstone of healthcare in the United Kingdom, established in 1948 with the simple yet profound principle of providing healthcare to all citizens, free at the point of use. This revolutionary system aimed to ensure that access to medical services would not depend on an individual’s financial situation, a concept that has since become fundamental to British societal values.Learn more...

Useful skills for a Cyber Security Lead: Click to view

To work as a Cyber Security Lead in the UK, you'll need a robust set of technical and soft skills, as well as relevant qualifications and experience. Here are some key areas to focus on:

Technical Skills

1. Network Security: Understand network protocols, firewall configurations, intrusion detection systems (IDS), and virtual private networks (VPNs).

2. Information Security Frameworks: Familiarity with frameworks such as ISO 27001, NIST Cybersecurity Framework, and GDPR.

3. Risk Management: Ability to assess and manage risks associated with information security and compliance.

4. Incident Response: Skills in identifying, responding to, and recovering from security incidents.

5. Security Auditing: Knowledge of how to conduct security audits and vulnerability assessments.

6. Penetration Testing: Experience with testing systems for vulnerabilities and potential breaches.

7. Cryptography: Understanding of encryption algorithms and how they protect data.

8. Security Operations: Experience with Security Information and Event Management (SIEM) tools to monitor and analyze security events.

9. Cloud Security: Knowledge of securing cloud environments (e.g., AWS, Azure, Google Cloud).

10. Programming/Scripting: Basic coding skills in languages like Python, Java, or PowerShell to automate tasks and analyze security data.

Soft Skills

1. Leadership: Ability to lead and manage a cybersecurity team effectively.

2. Communication: Strong verbal and written communication skills to convey security concepts to non-technical stakeholders.

3. Problem-Solving: Ability to think critically and creatively to address security issues and challenges.

4. Collaboration: Work effectively with other teams, including IT, compliance, and legal departments.

5. Project Management: Skills in managing projects, timelines, and deliverables associated with security initiatives.

Qualifications and Certifications

- Certifications: Consider obtaining certifications such as:

- Certified Information Systems Security Professional (CISSP)

- Certified Information Security Manager (CISM)

- Certified Ethical Hacker (CEH)

- CompTIA Security+

- Certified Information Systems Auditor (CISA)

- Education: A degree in computer science, information technology, or a related field is often preferred.

Experience

- Previous experience in a cybersecurity role, ideally with leadership responsibilities.

- A proven track record of managing security projects and initiatives.

- Experience in risk assessment and compliance.

Industry Knowledge

- Stay updated on current cybersecurity threats, trends, and technologies.

- Understanding of industry-specific regulations and compliance requirements that affect cybersecurity.

Cyber Security LeadinLeeds/Exeter/LondoninLeeds/Exeter/LondonPUBLISHED THU 2 JAN 2025

NHS Englandr3l7347B

Cyber Security LeadinLeeds/Exeter/London inLeeds/Exeter/LondonPUBLISHED THU 2 JAN 2025