Compliance Manager (Cyber Resilience)

Digital Health and Care Wales; Cardiff; On-site; GBP 60,000 - 80,000; Full time

Job summary

A national body supporting health services in the UK seeks a Compliance Manager to manage auditing and reporting processes. The ideal candidate will have a proven background in Information and Cyber Security, alongside strong communication skills. Responsibilities include leading audits, advising organizations on compliance status, and developing concise reporting templates and dashboards. Employee benefits include flexible working, a competitive salary, and 28 days of annual leave plus Bank Holidays.

Benefits

Flexible working

Competitive salary

28 days annual leave plus Bank Holidays

Opportunities for career development

Qualifications

• Proven background in Information/Cyber security.
• Ability to manage auditing processes effectively.
• Strong communication skills for reporting to stakeholders.

Responsibilities

• Manage the auditing and reporting processes.
• Lead CRU audits and support team members.
• Establish the reputation of CRU as a national service.
• Develop reporting templates and dashboards.
• Advise organizations on improving security posture.

Skills

Information/Cyber security

Audit management

Report development

Stakeholder engagement

Welsh language (desirable)

Job description

An exciting opportunity has arisen to join the NHS Wales Cyber Resilience Unit as aCompliance Manager. We are looking for someone with a proven background in Information/Cyber security, a flexible 'can do' attitude and approach to work and the ability toprovideadvice andassurance that security riskacross NHS Walesisbeingmanagedappropriately.

Whoarethe CRU?

The NHS Wales Cyber Resilience Unit (CRU),is an independent team hosted by Digital Health and Care Wales (DHCW).It'score purpose is to increase the security and resiliency of information systems across NHS Wales. The CRU has been delegated responsibility by the WelshGovernmentto leadtheimplementation and monitoringofcompliance with the Network and Information Systems Regulations (NIS)across the NHS in Wales.

Whatyou'llbe doing

The role of the Compliance Manager is to provide direction to the CRU team and ensure its compliance and incident reporting activities across NHS Wales are of an excellent standardin order toestablishthe CRU as world-class national service. The Compliance Manager willbe responsible forensuring that incident reporting and auditing process are carried out in a consistent,conciseand professional manner,in accordance withcyber security legislation such as the NIS regulations, best practice and Welsh Government requirements.

As a Compliance Manager, you will:

• Manage the CRU auditing and reporting processes based on new and updated regulation.
• Lead on Cyber Resiliency Unit audits, and support CRU team members in conducting audits, asrequired.
• Helpestablishthe reputation of the CRU as a world-class national service.
• Develop a consistent and concise report template for reporting to NHS Wales organisations and Welsh Government.
• Develop dashboards to present reports and KPIs to Management, NHS Walesorganisationsand Welsh Government.
• Review and quality assess reports produced by CRU before distribution.
• Present reports asrequiredto Management, NHS Walesorganisationsand Welsh Government.
• Advise NHS Wales organisations on how to improve their compliance status and security posture based on CAF audit results.
• Work with NHS Wales organisations and Welsh Government to further improve the auditing process and reporting structure.

The ability to speak Welsh is desirable for this post; English and/or Welsh speakers are equally welcome to apply.

Digital Health and Care Wales (DHCW) is an expert national body and part of NHS Wales. We work in partnership with NHS Wales colleagues and other key stakeholders to provide national digital and data services which support the delivery of health and social care in Wales. Modern health and care services depend on good digital tools, data and information. DHCW runs or works with more than 100 services and delivers major national digital transformation programmes to support this. In addition, DHCW provides expert advice in relation to cyber security and information governance. We give frontline staff the digital tools which help them provide safer and more efficient care. We are also giving patients and the public digital tools to better manage their own health and wellbeing, empowering people to live healthier lives. We put people at the heart of what we do, working to the highest standards to deliver quality and make digital a force for good in health and care.

Benefits

Working for DHCW offers lots of employee benefits, including flexible working, a competitive salary, 28 days of annual leave plus Bank Holidays and opportunities for career development. We are committed to recognising and celebrating our staff as the most valuable part of our organisation.