Ict Senior Security Analyst

Job overview

The cyber security analyst is an exciting role within the cyber security team, ensuring the overall digital safety and security of Imperial College Healthcare NHS Trust.

The analyst keeps informed with the constantly changing wider cyber security environment, through a pro-active approach to understanding new threats and exploring new technologies. Technically skilled and responsible for the provision and security for all cyber security toolsets, the cyber security analyst works closely with the Trust's technical operational teams and operations teams, to report on and mitigate threats to the trust.

Main duties of the job

Working closely with technical operations teams to assess and mitigate any outstanding security risks to the trust. In addition to planning, testing and implementing specific upgrades and maintenance, with the technical operational teams.

Assessing any NHS Cyber Alerts that effect the trust, responding to and mitigating with other teams, where necessary.

Maintaining the trusts Cyber security risk register and related reports.

Co-ordinating with external security providers, including the provision of regular independent assessments of the trusts overall cyber security risk.

Providing support to assist with the trust annual data security and protection toolkit (DSPT) submission and developing additional security controls and/or policies where gaps exist as the DSPT continues to evolve.

Investigate, review,adopt and use new cyber security technologies and toolsets and advise on how the Trusts overall cyber security standpoint can be improved.

Works closely with operations teams to understand and minimise any potential service impact of system upgrades and risk mitigation strategies.

Oversee identity and access management to trust information systems, ensuring least privilege principles.

Working for our organisation

At Imperial College Healthcare you can achieve extraordinary things with extraordinary people, working with leading clinicians pushing boundaries in patient care.

Become part of a vibrant team living our values - expert, kind, collaborative and aspirational. You’ll get an experience like no other and will fast forward your career. Benefits include career development, flexible working and wellbeing, staff recognition scheme. Make use of optional benefits including Cycle to Work, car lease schemes, season ticket loan or membership options for onsite leisure facilities.

We are committed to equal opportunities and improving the working lives of our staff and will consider applications to work flexibly, part time or job share. Please talk to us at interview.

Detailed job description and main responsibilities

The full job description provides an overview of the key tasks and responsibilities of the role and the person specification outlines the qualifications, skills, experience and knowledge required.

For both overviews please view the Job Description attachment with the job advert.

Person specification

Education/ qualifications

Essential criteria

• Computing/IT Degree or equivalent experience
• Related cyber security certification

Desirable criteria

• Cyber security certification, SSCP, CISM, CISSP
• Industry recognised qualifications in Networking and Firewalls
• Industry recognised qualifications in Server, Workstation, Active Directory, Cloud and/or Storage technologies

Experience

Essential criteria

• Experience in project, programme, and portfolio management
• Experience engaging with NHS England, NCSC, and 3rd party vendors/suppliers to deliver security initiatives.
• Experience in developing and managing cyber security policies and procedures; and quality improvement initiatives
• Experience in cyber security incident planning and response
• Experience in cyber security investigations including threat analysis
• Experience of vendor/supplier selection and contract management
• Experience in running cyber security exercises to test response plans

Desirable criteria

Skills/knowledge/ abilities

Essential criteria

• Sound knowledge and ability to implement best practice security principles and technologies
• Sound technical understanding of networking and Microsoft Server architecture, active directory, Windows
• Knowledge of NHS Data Security Standards including Data Security and Protection Toolkit requirements

Desirable criteria

• Knowledge and understanding of ISO/IEC 27000-series of standards
• Knowledge and understanding of Cyber Essentials Plus certification requirements and process

Right to work

If you need sponsorship to work in the UK, please visit the Home Office website for information on sponsorship and visa status before you fill in your application form. Due to recent changes in the UK immigration rules which affect Skilled Worker Visas, Global Business Mobility, Higher Skill Level and Increased Salary Thresholds, please ensure that you are able to meet the requirements to live and work in the UK before applying. Further information about eligibility is available on

We operate a joint recruitment hub across the North West London Acute Provider Collaborative Group. As part of this, your application and personal data may be shared with partner trusts within the group for recruitment and workforce purposes, in line with general data protection regulation (GDPR).

Please ensure you check your emails regularly as this is how we will communicate with you throughout the recruitment process. If you are shortlisted you will be contacted by email and text message (if you provide a mobile contact number).

#J-18808-Ljbffr