Search for more NHS jobs in Leicester
Job requirements
Essential
42 listedRequirements the employer expects applicants to meet.
- Knowledge
Knowledge and understanding of emergency planning legislation, including the Civil Contingencies Act 2004.
- Knowledge
Knowledge and understanding of emergency planning methodologies, incident management structures, command and control arrangements, and major incident response.
- Knowledge
Knowledge of cyber resilience principles and the operational impacts of cyber incidents on healthcare delivery.
- Knowledge
Knowledge and understanding of Cyber Resilience and Cyber Incident Management
- Knowledge
Experience of managing risks and reporting.
- Experience
Proven experience of writing reports.
- Experience
Experience of presenting complex information to a variety of people with different levels of understanding of presented topic.
- Experience
Ability to analyse complex issues where material may be conflicting and drawn from multiple sources.
- Experience
Experience of developing and implementing organisational resilience or business continuity improvement programmes.
- Experience
Experience of undertaking Business Impact Assessments and identifying critical service dependencies.
- Experience
Demonstrated capability to act upon incomplete information, using experience or critical thinking to make inferences and decision making.
- Experience
Demonstrated capability to manage own workload, to plan over short, medium and long- term and adjust plans and resource requirements accordingly.
- Training and Qualifications
Degree, NVQ level 4 in relevant subject or equivalent level qualification or significant experience of working at a similar level in the specialist area.
- Training and Qualifications
Evidence of continuing professional development in EPRR, Business Continuity, Organisational Resilience, Cyber Resilience or related field.
- Analytical and Judgement Skills
Commitment to and focused on quality, promotes high standards in all they do.
- Analytical and Judgement Skills
Ability to analyse complex organisational interdependencies and prioritise recovery requirements.
- Analytical and Judgement Skills
Consistently looks to improve what they do, looks for successful tried and tested ways of working, and seeks out innovation.
- Analytical and Judgement Skills
Actively develops themselves and supports others to do the same.
- Analytical and Judgement Skills
Evidence of continued professional development.
- Analytical and Judgement Skills
Ability to think critically, prioritise, and recommend appropriate action through the assessment of relevant information.
- Analytical and Judgement Skills
Ability to assess the impact of digital system failures on operational and clinical services and identify appropriate continuity measures.
- Analytical and Judgement Skills
Ability to problem solve and has attention to detail.
- Equality, Diversity and Inclusion
An understanding of and commitment to equality of opportunity and good working relationships, both in terms of day to-day working practices, and in relation to management systems.
- Equality, Diversity and Inclusion
Ability to treat all individuals with dignity and respect.
- Planning and Organisational Skills
Highly competent computing skills, including Microsoft Word, Excel and PowerPoint.
- Planning and Organisational Skills
Experience of leading complex work programmes involving multiple stakeholders and competing priorities.
- Planning and Organisational Skills
Highly motivated and able to plan and manage projects to deadlines.
- Planning and Organisational Skills
Able to influence and negotiate others to encourage collaborative working and achieve desired outcomes.
- Planning and Organisational Skills
Excellent organisational, programme, resource and time management skills.
- Communication and Relationship Skills
Ability to work independently and as part of a team.
- Communication and Relationship Skills
Ability to engage, influence and gain commitment from senior clinical, operational and corporate stakeholders.
- Communication and Relationship Skills
Excellent interpersonal communication skills at all levels.
- Communication and Relationship Skills
Ability to establish and maintain good working relationships with people from a wide variety of personal and professional backgrounds.
- Communication and Relationship Skills
You actively encourage and provide opportunities for others to share ideas and contributions.
- Communication and Relationship Skills
Values diversity and difference, operates with integrity and openness.
- Communication and Relationship Skills
Ability to communicate in a professional manner confidently and effectively both verbally and in written format.
- Communication and Relationship Skills
Ability to persuade and influence decision making.
- Other requirements specific to the role
Ability to operate at Official Sensitive level.
- Other requirements specific to the role
Ability to think ahead to anticipate, identify and address any risks or problems before they occur.
- Other requirements specific to the role
Able to work for long periods at a desk using a computer workstation.
- Other requirements specific to the role
Ability to travel between Trust sites and attend regional resilience meetings.
- Commitment to Trust Values and Behaviours
Must be able to demonstrate behaviours consistent with the Trust’s Values and Behaviours
Desirable
15 listedAdditional qualities the employer would prefer.
- Knowledge
Knowledge of Data Security and Protection Toolkit (DSPT) requirements.
- Knowledge
Knowledge of NHS digital systems and their role in clinical service delivery.
- Knowledge
Understanding of recovery time objectives, recovery priorities and critical service dependencies.
- Experience
Experience working in the NHS or Public Sector.
- Experience
Experience of mapping digital system dependencies across complex organisations.
- Experience
Experience of developing, implementing and reviewing business continuity and emergency preparedness plans, including arrangements for cyber-related disruptions, in line with NHS England, NCSC and local organisational requirements.
- Experience
Experience of designing, delivering and evaluating exercises and simulations to test emergency preparedness, business continuity and cyber resilience arrangements, including identifying lessons learned and supporting continuous improvement.
- Training and Qualifications
Diploma in Health Emergency Planning (DipHEP).
- Training and Qualifications
Qualification in project management or management studies.
- Training and Qualifications
Cyber resilience, cyber incident management or information governance training.
- Training and Qualifications
Experience of working in specialist area for a minimum of 9 months.
- Analytical and Judgement Skills
Able to make a connection between their work and the benefit to patients and the public.
- Communication and Relationship Skills
Ability to communicate confidently with people at all levels of seniority.
- Communication and Relationship Skills
Ability to diffuse challenging situations.
- Other requirements specific to the role
Experience of working in an emergency situation.
Job overview
The EPRR Business Continuity Specialist (Cyber Focus) will lead the development and implementation of the Trust's cyber resilience and business continuity programme, ensuring the organisation can maintain safe and effective services during cyber-attacks, digital outages, and the loss of critical IT systems.
Working closely with clinical, operational, digital and corporate teams, the post holder will identify critical digital dependencies, undertake business impact assessments, and develop robust continuity plans that align with NHS England EPRR standards, NCSC guidance, and wider organisational resilience requirements.
Main duties of the job
The role will be responsible for embedding cyber-related business continuity arrangements across the Trust by supporting Clinical Management Groups (CMGs) and corporate services to develop, maintain and test local continuity plans.
The post holder will design and facilitate training, exercises and simulations to strengthen preparedness, evaluate organisational readiness, and drive continuous improvement through the identification and implementation of lessons learned. They will also contribute to major incident planning and provide specialist advice on the operational impacts of digital disruption.
As a key member of the EPRR function, the post holder will work collaboratively with Digital, Information Governance, Cyber Security and external partners to strengthen organisational resilience, provide assurance against regulatory requirements, and support the Trust's ability to respond to and recover from cyber incidents.
The role will play a critical part in reducing patient safety, operational, financial and reputational risks associated with the increasing cyber threat facing NHS organisations.
Detailed job description and main responsibilities
Cyber Resilience and Business Continuity
The post holder will lead the development, implementation and maintenance of the Trust's Cyber-Attack Business Continuity Plan, ensuring alignment with NHS England EPRR standards, NCSC guidance, Data Security and Protection Toolkit (DSPT) requirements, and organisational resilience objectives.
The post holder will work collaboratively with Clinical Management Groups (CMGs), Corporate Directorates, Digital & Data Services and key stakeholders to ensure appropriate arrangements are in place to maintain critical services during cyber incidents, digital outages and loss of key systems.
Business Impact Assessment and Digital Dependency Mapping
The post holder will facilitate and support Business Impact Assessments across clinical and corporate services to identify critical activities, recovery priorities, key dependencies and acceptable downtime periods.
They will maintain an understanding of the Trust's critical digital systems and associated operational dependencies, ensuring continuity arrangements are proportionate to identified risks and vulnerabilities.
The post holder will support the EPRR Team ensure the Trust has in place an ambitious EPRR Work Programme with the aim of ensuring continued improvement and establishing best practice within EPRR.
Assurance, Governance and Compliance
The post holder will support the provision of assurance regarding business continuity and cyber resilience arrangements through the monitoring, review and reporting of compliance with relevant legislation, national guidance and Trust policies.
The post holder will prepare reports, briefings and assurance documentation for committees, senior managers and other governance groups as required.
The post holder will support the EPRR Team in the development of robust plans which in turn, will support the Trust and its stakeholders to respond to incidents and emergencies.
Service and CMG Support
The post holder will work closely with CMGs and Corporate Directorates to develop, review and maintain local business continuity plans, ensuring that services are prepared to respond effectively to the loss of critical digital systems and other major disruptions.
They will provide specialist advice and guidance to managers and service leads on continuity planning, resilience improvement and recovery arrangements.
Working with Digital and Cyber Teams
The post holder will establish strong working relationships with Digital & Data Services, Information Governance and Cyber Security colleagues to ensure continuity and recovery arrangements are aligned with technical disaster recovery and cyber incident management plans.
The post holder will support the review and development of recovery strategies, recovery priorities and system restoration arrangements for critical Trust services.
Learning and Continuous Improvement
The post holder will contribute to the identification, capture and implementation of lessons identified from incidents, exercises, audits and assurance reviews, ensuring that improvements are embedded into plans, policies, procedures and training programmes.
Policy
The post holder will support with the ongoing development, review, and implementation of the Trust’s Business Continuity Management Policy. This should ensure the relevant requirements of NHS England’s core standards for EPRR and ISO:22301 are implemented across the organisation as required.
Support UHL Response to Incidents
The post holder will provide support and advice during incidents to the Trust’s incident coordination teams.
Professional Relationships
The post holder may need to represent the Trust and promote UHL and the EPRR
Teams’ interests in multi-agency meetings. This may include disseminating relevant information as well as developing and maintaining effective working relationships with stakeholders.
Information
The post holder will deal with sensitive and confidential material from both within the Trust and other Category 1 and 2 responders.
Personal Development
The post holder will be responsible for undertaking personal development and training to enhance skills and expertise and to maintain up-to-date knowledge of legislation and policies relating to all aspects of EPRR, including business continuity.
Please see job description/person specification for full details on the role.
Applicant requirements
The postholder will have access to vulnerable people in the course of their normal duties and as such this post is subject to the Rehabilitation of Offenders Act 1974 (Exceptions) Order 1975 (Amendment) (England and Wales) Order 2020 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service to check for any previous criminal convictions.
WhatsApp job alerts
Get instant WhatsApp alerts for Band 7 Specialist roles in Leicester
Create your Job Clerk account first. We'll collect your alert preferences during onboarding and help you turn on WhatsApp notifications for matching healthcare roles.
Applying for this NHS job
This advert is for EPRR Business Continuity Specialist (Cyber Focus) with University Hospitals of Leicester NHS Trust in Leicester, England. It is listed as a Band 7 Specialist role. The advertised salary is £49,387 - £56,515 Per annum. The contract type is Fixed term: 12 months (12-18 months). The application deadline is 14 Oct 2026.
Before you apply, compare the job description with the person specification and mirror the employer's essential criteria in your supporting information. Use the vacancy title, employer, location, salary, contract type, closing date and posted date (30 Sep 2026) to decide whether this role fits your current NHSjob search. If the employer can close applications early, prepare the application before the stated deadline rather than waiting for the final day.
For more context, review related Job Clerk pages for the same profession, band or location where they exist, then use the application-support guides to tailor your statement and prepare for interview.