IT Security Engineer in Birmingham

An exciting opportunity has become available for a Senior IT Security Engineer to join our well-established team. The successful applicant will be responsible for a range of Trust IT Security policy implementation and development, shaping the Trust's long-term IT patching cycle, to ensure a seamless and consistent delivery of IT Services.

Applicants must have achieved, or evidence of working towards & ability to obtain recognised IT Security qualifications such as CISMP, CISSP, CASP along with at least 3 years experience in an IT role which should include IT security as a responsibility & dealing with vulnerabilities, risks & threats.

The successful applicant must be able to take part in the team's out of hours on-call rota (1 in 3), this will attract an additional 9.5% on-call allowance in addition to the band 6 salary & section 2 unsocial hours enhancements. The on-call rota includes covering outside standard office hours, public holidays, and weekends. There may be a requirement to attend Trust sites in-person across the West Midlands at short notice. Please note, a full UK driving licence is essential for this post.

Key Responsibilities:

• Deliver the role of Senior IT Security Engineer in accordance with the agreed Role Profile and Objectives.
• Utilise specialist knowledge across the range of work procedures and practices relating directly to the arena of IT security.
• Assist as directed by the Head of IT Security, for the efficient and effective support of IT security systems and services throughout the Trust.
• Provide installation or repair and maintenance of WMAS trust physical assets as required.
• Assist the Head of IT Security to develop, contribute towards and implement the Trust's long-term strategic plans, policies, procedures and guidelines related to IT Security.
• Assist in the development of an IT Security awareness program and raise awareness of IT Security amongst staff, promoting an IT Security culture.
• Lead on ensuring and maintaining the Confidentiality, Integrity and Availability of Trust IT systems and services.
• Maintain and contribute towards the implementation of a suite of comprehensive IT security information systems across the organisation as a major job responsibility.
• Alert the Trust in real time to emerging NHS and Trust IT security threats.
• Ensure governing body directives, legislation, frameworks and internal policies are deliverable, implemented and adhered to.
• Assume wider responsibilities as assigned by the Head of IT Security.
• Maintain high awareness of developing standards and innovations in the area of IT Security, and under the guidance of the Head of IT Security ensure the Trust exploits opportunities.
• Ensure services are supported to agreed hours of service to agreed service levels by participation within the on-call rota.
• Act as an authority and provide specialist knowledge across the range of IT security procedures and practices.
• Work with stakeholders to ensure clear definition and agreement of service, particularly with relation to possible downtime during patch management.
• Conduct risk assessments as appropriate and advise the Trust on IT Security concerns.
• Provide specialist knowledge as required or requested by other departments on the procurement of new solutions, systems or services to ensure they comply with the Trust's IT Security Strategy.
• Promote effective use of IT systems and services, developing IT Security awareness and promoting a culture of IT Security.
• Be responsible for managing and maintaining the various highly complex IT Security systems and services, as well as advising on future technologies, research and development.
• Participate in continued professional development, training and courses as identified ensuring skills and knowledge are kept current.
• Identify staff IT Security knowledge gaps, develop and promote an IT Security awareness program in conjunction with other departments as required.
• Assist the Head of IT Security to identify and develop quality measures to ensure the highest levels of service delivery are achieved.
• Carry out complex projects pertinent to the work of the Trust under the direction of the Head of IT Security.
• Conduct vulnerability assessments and other associated activities as appropriate.
• Liaise with NHS England, NCSC and other relevant bodies as required ensuring IT Security advisories, directives and notifications are actioned and logged.
• Ensure all systems and applications where applicable are kept up to date and are encompassed in the patch management routine.
• Assist the Head of IT Security with developing and maintaining an Incident Response Plan and Computer Emergency Response Team in relation to severe IT security incidents.
• Take part in activities that lead to personal and/or team growth.
• Attend supervision and appraisal sessions with the Line Manager.
• Lead on investigating IT Security issues using analytical & judgmental skills to fault find.
• Travel to other Trust sites may be required on an ad-hoc basis, therefore your own vehicle and a full clean UK driver's license is required.