Cyber Security Advisor (GRC) – Risk & Compliance Lead

NHS England; Leeds, Exeter, Greater London; On-site; GBP 59,000 - 68,000; Full time

Job summary

NHS England is recruiting for a Security Advisor/Analyst within the Cyber Operations GRC team. The role focuses on governance, risk management, and assurance to protect NHS Digital assets and patient data, while enabling safe, compliant operation across an increasingly complex threat landscape.

The post carries an RRP uplift and requires residency in the UK with SC clearance considerations. Applicants should expect to engage with diverse stakeholders and deliver evidence-based security

Qualifications

• Knowledge of information security management and compliance.
• Understanding of privacy, confidentiality, integrity and availability.
• Knowledge of cybersecurity risk management.
• Ability to protect information and information systems.

Responsibilities

• Shape security outcomes by integrating technology, risk, and business strategy.
• Engage stakeholders to drive security improvements and prioritise risks.
• Develop and manage security metrics, dashboards, and reporting for informed decisions.
• Provide security guidance to system and service development teams to ensure secure by design.
• Contribute to data security policies, standards, and implementation guides.
• Support governance and assurance activities with meeting papers, action tracking and reporting to senior stakeholders.
• Analyze data from multiple streams to inform data security best practices.
• Provide security advice to NHS England teams to assure cyber resilience.

Skills

Information security management

Cybersecurity policy knowledge

Data protection & privacy

Cyber risk management

Education

Post-graduate degree in Cyber Security

CPD / continuous professional development

Job description

NHS England is recruiting for a Security Advisor/Analyst within the Cyber Operations GRC team. The role focuses on governance, risk management, and assurance to protect NHS Digital assets and patient data, while enabling safe, compliant operation across an increasingly complex threat landscape.

The post carries an RRP uplift and requires residency in the UK with SC clearance considerations. Applicants should expect to engage with diverse stakeholders and deliver evidence-based security