# EPRR Business Continuity Specialist (Cyber Focus) > NHS job listing from Job Clerk for University Hospitals of Leicester NHS Trust. ## Canonical URLs - **HTML:** https://www.jobclerk.com/job/eprr-business-continuity-specialist-cyber-focus/35fa3087-c3df-4d0b-b730-3e910b668fb6 - **Markdown:** https://www.jobclerk.com/job/eprr-business-continuity-specialist-cyber-focus/35fa3087-c3df-4d0b-b730-3e910b668fb6.md ## Summary - **Status:** Live - **Employer:** University Hospitals of Leicester NHS Trust - **Location:** Leicester Royal Infirmary - **Workplace type:** onsite - **Profession:** Specialist - **Grade:** Band 7 - **Salary:** £49,387 - £56,515 Per annum - **Contract type:** Fixed term: 12 months (12-18 months) - **Employment type:** Full time - 37.5 hours per week - **Closing date:** 2026-10-14T22:59:00.000Z - **Posted:** 2026-09-30T12:20:58.245Z - **Source information URL:** https://www.healthjobsuk.com/job/UK/Leicestershire/Leicester/University_Hospitals_Leicester_NHS_Trust/Emergency_Preparedness_Resilience_Response/Emergency_Preparedness_Resilience_Response-v8293475 - **Application URL:** https://apps.trac.jobs/job-advert/8293475?ShowJobAdvert=&feedid=9002 - **Employer website:** https://www.leicestershospitals.nhs.uk ## Job Content ### Job overview The EPRR Business Continuity Specialist (Cyber Focus) will lead the development and implementation of the Trust's cyber resilience and business continuity programme, ensuring the organisation can maintain safe and effective services during cyber-attacks, digital outages, and the loss of critical IT systems. Working closely with clinical, operational, digital and corporate teams, the post holder will identify critical digital dependencies, undertake business impact assessments, and develop robust continuity plans that align with NHS England EPRR standards, NCSC guidance, and wider organisational resilience requirements. ### Main duties of the job The role will be responsible for embedding cyber-related business continuity arrangements across the Trust by supporting Clinical Management Groups (CMGs) and corporate services to develop, maintain and test local continuity plans. The post holder will design and facilitate training, exercises and simulations to strengthen preparedness, evaluate organisational readiness, and drive continuous improvement through the identification and implementation of lessons learned. They will also contribute to major incident planning and provide specialist advice on the operational impacts of digital disruption. As a key member of the EPRR function, the post holder will work collaboratively with Digital, Information Governance, Cyber Security and external partners to strengthen organisational resilience, provide assurance against regulatory requirements, and support the Trust's ability to respond to and recover from cyber incidents. The role will play a critical part in reducing patient safety, operational, financial and reputational risks associated with the increasing cyber threat facing NHS organisations. ### Detailed job description and main responsibilities Cyber Resilience and Business Continuity The post holder will lead the development, implementation and maintenance of the Trust's Cyber-Attack Business Continuity Plan, ensuring alignment with NHS England EPRR standards, NCSC guidance, Data Security and Protection Toolkit (DSPT) requirements, and organisational resilience objectives. The post holder will work collaboratively with Clinical Management Groups (CMGs), Corporate Directorates, Digital & Data Services and key stakeholders to ensure appropriate arrangements are in place to maintain critical services during cyber incidents, digital outages and loss of key systems. Business Impact Assessment and Digital Dependency Mapping The post holder will facilitate and support Business Impact Assessments across clinical and corporate services to identify critical activities, recovery priorities, key dependencies and acceptable downtime periods. They will maintain an understanding of the Trust's critical digital systems and associated operational dependencies, ensuring continuity arrangements are proportionate to identified risks and vulnerabilities. The post holder will support the EPRR Team ensure the Trust has in place an ambitious EPRR Work Programme with the aim of ensuring continued improvement and establishing best practice within EPRR. Assurance, Governance and Compliance The post holder will support the provision of assurance regarding business continuity and cyber resilience arrangements through the monitoring, review and reporting of compliance with relevant legislation, national guidance and Trust policies. The post holder will prepare reports, briefings and assurance documentation for committees, senior managers and other governance groups as required. The post holder will support the EPRR Team in the development of robust plans which in turn, will support the Trust and its stakeholders to respond to incidents and emergencies. Service and CMG Support The post holder will work closely with CMGs and Corporate Directorates to develop, review and maintain local business continuity plans, ensuring that services are prepared to respond effectively to the loss of critical digital systems and other major disruptions. They will provide specialist advice and guidance to managers and service leads on continuity planning, resilience improvement and recovery arrangements. Working with Digital and Cyber Teams The post holder will establish strong working relationships with Digital & Data Services, Information Governance and Cyber Security colleagues to ensure continuity and recovery arrangements are aligned with technical disaster recovery and cyber incident management plans. The post holder will support the review and development of recovery strategies, recovery priorities and system restoration arrangements for critical Trust services. Learning and Continuous Improvement The post holder will contribute to the identification, capture and implementation of lessons identified from incidents, exercises, audits and assurance reviews, ensuring that improvements are embedded into plans, policies, procedures and training programmes. Policy The post holder will support with the ongoing development, review, and implementation of the Trust’s Business Continuity Management Policy. This should ensure the relevant requirements of NHS England’s core standards for EPRR and ISO:22301 are implemented across the organisation as required. Support UHL Response to Incidents The post holder will provide support and advice during incidents to the Trust’s incident coordination teams. Professional Relationships The post holder may need to represent the Trust and promote UHL and the EPRR Teams’ interests in multi-agency meetings. This may include disseminating relevant information as well as developing and maintaining effective working relationships with stakeholders. Information The post holder will deal with sensitive and confidential material from both within the Trust and other Category 1 and 2 responders. Personal Development The post holder will be responsible for undertaking personal development and training to enhance skills and expertise and to maintain up-to-date knowledge of legislation and policies relating to all aspects of EPRR, including business continuity. Please see job description/person specification for full details on the role. ### Applicant requirements The postholder will have access to vulnerable people in the course of their normal duties and as such this post is subject to the Rehabilitation of Offenders Act 1974 (Exceptions) Order 1975 (Amendment) (England and Wales) Order 2020 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service to check for any previous criminal convictions. ## Person Specification ### Knowledge **Essential** - Knowledge and understanding of emergency planning legislation, including the Civil Contingencies Act 2004. - Knowledge and understanding of emergency planning methodologies, incident management structures, command and control arrangements, and major incident response. - Knowledge of cyber resilience principles and the operational impacts of cyber incidents on healthcare delivery. - Knowledge and understanding of Cyber Resilience and Cyber Incident Management - Experience of managing risks and reporting. **Desirable** - Knowledge of Data Security and Protection Toolkit (DSPT) requirements. - Knowledge of NHS digital systems and their role in clinical service delivery. - Understanding of recovery time objectives, recovery priorities and critical service dependencies. ### Experience **Essential** - Proven experience of writing reports. - Experience of presenting complex information to a variety of people with different levels of understanding of presented topic. - Ability to analyse complex issues where material may be conflicting and drawn from multiple sources. - Experience of developing and implementing organisational resilience or business continuity improvement programmes. - Experience of undertaking Business Impact Assessments and identifying critical service dependencies. - Demonstrated capability to act upon incomplete information, using experience or critical thinking to make inferences and decision making. - Demonstrated capability to manage own workload, to plan over short, medium and long- term and adjust plans and resource requirements accordingly. **Desirable** - Experience working in the NHS or Public Sector. - Experience of mapping digital system dependencies across complex organisations. - Experience of developing, implementing and reviewing business continuity and emergency preparedness plans, including arrangements for cyber-related disruptions, in line with NHS England, NCSC and local organisational requirements. - Experience of designing, delivering and evaluating exercises and simulations to test emergency preparedness, business continuity and cyber resilience arrangements, including identifying lessons learned and supporting continuous improvement. ### Training and Qualifications **Essential** - Degree, NVQ level 4 in relevant subject or equivalent level qualification or significant experience of working at a similar level in the specialist area. - Evidence of continuing professional development in EPRR, Business Continuity, Organisational Resilience, Cyber Resilience or related field. **Desirable** - Diploma in Health Emergency Planning (DipHEP). - Qualification in project management or management studies. - Cyber resilience, cyber incident management or information governance training. - Experience of working in specialist area for a minimum of 9 months. ### Analytical and Judgement Skills **Essential** - Commitment to and focused on quality, promotes high standards in all they do. - Ability to analyse complex organisational interdependencies and prioritise recovery requirements. - Consistently looks to improve what they do, looks for successful tried and tested ways of working, and seeks out innovation. - Actively develops themselves and supports others to do the same. - Evidence of continued professional development. - Ability to think critically, prioritise, and recommend appropriate action through the assessment of relevant information. - Ability to assess the impact of digital system failures on operational and clinical services and identify appropriate continuity measures. - Ability to problem solve and has attention to detail. **Desirable** - Able to make a connection between their work and the benefit to patients and the public. ### Equality, Diversity and Inclusion **Essential** - An understanding of and commitment to equality of opportunity and good working relationships, both in terms of day to-day working practices, and in relation to management systems. - Ability to treat all individuals with dignity and respect. ### Planning and Organisational Skills **Essential** - Highly competent computing skills, including Microsoft Word, Excel and PowerPoint. - Experience of leading complex work programmes involving multiple stakeholders and competing priorities. - Highly motivated and able to plan and manage projects to deadlines. - Able to influence and negotiate others to encourage collaborative working and achieve desired outcomes. - Excellent organisational, programme, resource and time management skills. ### Communication and Relationship Skills **Essential** - Ability to work independently and as part of a team. - Ability to engage, influence and gain commitment from senior clinical, operational and corporate stakeholders. - Excellent interpersonal communication skills at all levels. - Ability to establish and maintain good working relationships with people from a wide variety of personal and professional backgrounds. - You actively encourage and provide opportunities for others to share ideas and contributions. - Values diversity and difference, operates with integrity and openness. - Ability to communicate in a professional manner confidently and effectively both verbally and in written format. - Ability to persuade and influence decision making. **Desirable** - Ability to communicate confidently with people at all levels of seniority. - Ability to diffuse challenging situations. ### Other requirements specific to the role **Essential** - Ability to operate at Official Sensitive level. - Ability to think ahead to anticipate, identify and address any risks or problems before they occur. - Able to work for long periods at a desk using a computer workstation. - Ability to travel between Trust sites and attend regional resilience meetings. **Desirable** - Experience of working in an emergency situation. ### Commitment to Trust Values and Behaviours **Essential** - Must be able to demonstrate behaviours consistent with the Trust’s Values and Behaviours ## Documents - [employee benefits (pdf, 578.5kb)](https://www.healthjobsuk.com/documents?edoc=2350) - [understanding your right to work in the uk (pdf, 1.1mb)](https://www.healthjobsuk.com/documents?edoc=2349) - [jd& ps eprr business continuity specialist (cyber focus) (pdf, 348.2kb)](https://www.healthjobsuk.com/documents?vdoc=10612625) - [jd & ps eprr business continuity specialist (cyber focus) (pdf, 348.2kb)](https://www.healthjobsuk.com/documents?vdoc=10611834) ## Agent Notes - This Markdown page is generated from the same Job Clerk job record as the HTML job detail page. - Use the canonical HTML URL for user-facing references. - Use the application URL when the user wants to apply on the source NHS site.