ICT Senior Security Analyst

The cyber security analyst is an exciting role within the cyber security team, ensuring the overall digital safety and security of Imperial College Healthcare NHS Trust. The analyst keeps informed with the constantly changing wider cyber security environment, through a pro-active approach to understanding new threats and exploring new technologies. Technically skilled and responsible for the provision and security for all cyber security toolsets, the cyber security analyst works closely with the Trust's technical operational teams and operations teams, to report on and mitigate threats to the trust.

Main duties of the job:

• Working closely with technical operations teams to assess and mitigate any outstanding security risks to the trust.
• Assessing any NHS Cyber Alerts that affect the trust, responding to and mitigating with other teams, where necessary.
• Maintaining the trusts Cyber security risk register and related reports.
• Co-ordinating with external security providers, including the provision of regular independent assessments of the trusts overall cyber security risk.
• Providing support to assist with the trust annual data security and protection toolkit (DSPT) submission and developing additional security controls and/or policies where gaps exist as the DSPT continues to evolve.
• Investigate, review, adopt and use new cyber security technologies and toolsets and advise on how the Trusts overall cyber security standpoint can be improved.
• Works closely with operations teams to understand and minimise any potential service impact of system upgrades and risk mitigation strategies.
• Oversee identity and access management to trust information systems, ensuring least privilege principles.

About us:

At Imperial College Healthcare you can achieve extraordinary things with extraordinary people, working with leading clinicians pushing boundaries in patient care. Become part of a vibrant team living our values - expert, kind, collaborative and aspirational. You'll get an experience like no other and will fast forward your career.

Benefits include:

• Career development
• Flexible working
• Wellbeing
• Staff recognition scheme
• Optional benefits including Cycle to Work, car lease schemes, season ticket loan or membership options for onsite leisure facilities.

We are committed to equal opportunities and improving the working lives of our staff and will consider applications to work flexibly, part time or job share.

Environmental sustainability:

Climate change and poor air quality is a health emergency that harms people's health and wellbeing and widens health inequalities. The Trust is also committed to reducing its impact on the environment by reducing our greenhouse gas emissions to Net Zero by 2045. All our employees have a role to play, and we have an active green network that supports staff to act in ways that ensures that our services are efficient, sustainable and reduce our impact on the environment.

Person Specification:

Education/qualifications:

• Essential: Computing/IT Degree or equivalent experience; Related cyber security certification.
• Desirable: Cyber security certification, SSCP, CISM, CISSP; Industry recognised qualifications in Networking and Firewalls; Industry recognised qualifications in Server, Workstation, Active Directory, Cloud and/or Storage technologies.

Experience:

• Essential: Experience in project, programme, and portfolio management; Experience engaging with NHS England, NCSC, and 3rd party vendors/suppliers to deliver security initiatives; Experience in developing and managing cyber security policies and procedures; and quality improvement initiatives; Experience in cyber security incident planning and response; Experience in cyber security investigations including threat analysis; Experience of vendor/supplier selection and contract management; Experience in running cyber security exercises to test response plans.

Skills/knowledge/abilities:

• Essential: Sound knowledge and ability to implement best practice security principles and technologies; Sound technical understanding of networking and Microsoft Server architecture, active directory, Windows; Knowledge of NHS Data Security Standards including Data Security and Protection Toolkit requirements.
• Desirable: Knowledge and understanding of ISO/IEC 27000-series of standards; Knowledge and understanding of Cyber Essentials Plus certification requirements and process.