ICT Cyber Security Specialist

Job overview

We are seeking an experienced and motivated ICT Cyber Security Specialist to support the delivery of the Trust’s cyber security capability across a large, complex and clinically critical digital environment. The role plays an important part in protecting core ICT services, clinical systems, patient data and other Trust services by ensuring cyber risks are actively identified, analysed and managed.

Working within the ICT Cyber Security Team, the post holder will contribute to maintaining a strong cyber security posture through operational security activities, assurance work and close collaboration with colleagues across ICT, Information Governance and the wider organisation. The role requires a practical, analytical approach, strong attention to detail and the ability to work proactively in a fast‑paced environment.

This is a hands‑on operational role that supports Trust‑wide compliance with national and NHS cyber security requirements and provides assurance to senior stakeholders that cyber risks are being effectively controlled. The role offers the opportunity to work across a broad range of systems, services and security domains in an organisation where cyber security directly supports patient safety and service resilience.

Please note the advert may close early due to reaching a high number of applications.

Main duties of the job

The post holder will monitor and respond to cyber security alerts and notifications, investigate security events, and carry out technical analysis of systems and logs to identify vulnerabilities and reduce risk. The role includes managing and maintaining cyber security systems, records and registers, and contributing to audits, risk assessments, business impact assessments and incident response activities.

The post holder will support mandatory cyber assurance frameworks, maintain audit readiness, and contribute to the development and review of cyber security policies, procedures and incident response plans. The role involves providing specialist cyber security advice, supporting security due diligence for projects and third‑party access, and contributing to staff awareness and training initiatives.

The post holder will manage competing priorities, support business continuity activities, remain up to date with national and NHS cyber guidance, and work collaboratively with colleagues across ICT, Information Governance and the wider Trust. Occasional out‑of‑hours working and limited activity in clinical areas may be required.

Detailed job description and main responsibilities

The ICT Cyber Security Specialist is a key operational role within the Trust’s ICT Cyber Security Team, responsible for delivering defined elements of the Trust’s cyber security work programme and supporting the ongoing protection of systems, services and information assets. The post holder will work under the direction of the ICT Head of Cyber Security and will be expected to take ownership of assigned cyber security systems, activities and workstreams, ensuring they are operated, maintained and documented in line with Trust policies, national guidance and recognised good practice.

The role involves undertaking detailed technical and analytical activities to support the prevention, detection and management of cyber security threats. This includes analysing complex system and security information, correlating alerts and events, and supporting detailed investigations to determine root cause, impact and required remediation. The post holder will ensure investigations and outcomes are appropriately documented, communicated and escalated in line with agreed processes.

The post holder will lead and contribute to a range of assurance‑focused activities, including vulnerability assessments, cross‑site cyber security audits, risk assessments, business impact assessments and gap analysis. Findings will be used to inform proportionate recommendations, with the post holder working collaboratively with ICT service teams to agree mitigating actions and track progress to completion. This work supports the Trust’s ability to demonstrate effective cyber risk management and operational resilience.

A significant element of the role is supporting the Trust’s cyber governance and compliance obligations. The post holder will contribute to maintaining audit readiness and assurance evidence for national and NHS‑mandated frameworks, including the Data Security and Protection Toolkit, Cyber Essentials Plus and ISO 27001 controls. This includes maintaining supporting documentation, registers, logs, procedures and system‑level security artefacts, and supporting internal and external audits as required.

The role includes supporting the secure introduction and ongoing management of systems, services and suppliers by contributing to cyber security reviews and due diligence activity. This involves ensuring appropriate security documentation and controls are in place before access is granted, maintaining central records of third‑party and contractor access, and supporting regular review to ensure access remains appropriate, current and compliant. The post holder will also support the management and periodic review of privileged accounts.

The post holder will contribute to the development, review and continuous improvement of cyber security policies, procedures and incident response arrangements, ensuring they remain aligned with legislation, NHS guidance and emerging threats. The role includes providing specialist advice and guidance to colleagues across ICT, Information Governance, clinical and corporate services, supporting informed decision‑making and effective risk management.

The post holder will support staff awareness and training activity where required and contribute to the Trust’s wider cyber security engagement and communication approach. The role requires the ability to balance structured assurance activity with operational responsiveness, manage changing priorities and contribute to business continuity planning and exercises.

Occasional out‑of‑hours working may be required to support operational needs. The role may involve limited activity within clinical environments and requires adherence to Trust health, safety and infection control requirements.