Cyber Security Analyst

Transformation Unit; Elland; Hybrid; GBP 32,000 - 39,000; Full time

Job summary

Calderdale and Huddersfield NHS Foundation Trust is seeking a Cyber Security Analyst (NHS AfC Band 5) for a permanent post. The role involves defending against cyber threats, developing security programs, and supporting compliance with standards such as ISO27001 and DSPT.

Flexible working and remote options are available, with a 37.5-hour week. The Health Informatics Service hosts the role, focusing on safeguarding clinical and operational data across the UK.

Qualifications

• GCSE Educated or Higher Education level or equivalent working experience
• Evidence of continuing professional development
• Willingness to undertake professional training relating to the role
• Regularly review and maintain any attained Registration or Certificates relevant to the post
• Qualifications surrounding systems security software

Responsibilities

• Develop security programs with the Cyber Security Manager addressing risks and business security requirements
• Identify IT assets needing security controls and plan security policies for resources
• Assist with technical risk assessments, vulnerability scanning, penetration testing and third party risk reviews
• Support compliance efforts and enforcement of security policies within the organization
• Test production issues, respond to incidents, and apply countermeasures
• Support security standards like DSP Toolkit, ISO27001, Cyber Essentials & PCI DSS
• Monitor security solutions and triage incidents through to resolution

Skills

Vulnerability assessment

Incident response

Security governance

Python scripting

NHS knowledge

Risk assessment

Education

GCSE or higher education

Tools

Linux OS

Windows

Job description

Main area Cyber Security Grade NHS AfC: Band 5 Contract Permanent Hours

• Full time
• Flexible working
• Home or remote working

37.5 hours per week (up to 37.5 hours per week) Job ref 372-THIS1429-A

Employer Calderdale and Huddersfield NHS Foundation Trust Employer type NHS Site The Health Informatics Service (THIS) Town Elland Salary £32,073 - £39,043 per annum, pro rata Salary period Yearly Closing 12/11/2026 23:59 Interview date 02/12/2026

Cyber Security Analyst

NHS AfC: Band 5

This is an internal opportunity within CHFT and therefore is only available to colleagues employed by Calderdale and Huddersfield NHS Foundation Trust.

Job overview

An exciting opportunity has arisen to join our organization. We are looking to appoint a highly self-motivated and enthusiastic individual who enjoys defending against a challenging and fast paced cyber threat landscape.

The Health Informatics Service is a well-established, innovative, and award-winning digital healthcare and IT specialist. We work with public, private, and charitable health and care organisations across the UK and are hosted by Calderdale and Huddersfield NHS Foundation Trust. Our tried and trusted solutions have been developed and refined by our dedicated team of health informatics experts who share the sector’s passion and values for providing the best possible care, insight and service for patients and customers.

Main duties of the job

The postholder:

• Work with the Cyber Security Manager and peers to develop a security program that addresses identified risks and business security requirements.
• Work with selected resource owners to identify company IT assets that require security controls and determine appropriate security policies for identified resources. Research, evaluate, design, test, and plan the implementation of new or updated information security hardware or software, and analyse its impact on the existing environment.
• Assist the Cyber Security Manager with technical risk assessments, such as vulnerability scanning, penetration testing, and risk reviews for new applications, and third party risk assessments.
• Assist team leads with compliance efforts and security policies, as well as the enforcement of policies within the organization.
• Test for production issues, respond to incidents, and perform related countermeasures.
• Assist with industry security compliance standards such as DSP Toolkit, ISO27001, Cyber Essentials & PCI DSS.
• Monitor security solutions and triage incidents through to resolution

Working for our organisation

CHFT is an integrated acute and community Trust serving diverse communities across Calderdale and Kirklees, with strong partnerships across West Yorkshire. We are proud of our One Culture of Care — caring for each other with the same compassion, kindness and respect that we show our patients — and of the values that underpin how we work: we put people first, we go see, we work together to get results, and we do the must dos.

CHFT is recognised as a forward looking, digitally enabled Trust, with a strong track record of using data, innovation and system collaboration to improve quality, safety and outcomes. We are ambitious about the role that acute trusts play in prevention, population health and reducing inequalities, and this post sits at the heart of that agenda.

Detailed job description and main responsibilities

Please see the job description and person specification below for full details about the role.

Person specification

Qualifications

• GCSE Educated or Higher Education level or equivalent working experience
• Evidence of continuing professional development
• Willingness to undertake professional training relating to the role
• Regularly review and maintain any attained Registration or Certificates relevant to the post
• Qualifications surrounding systems security software

Knowledge

• Experience in working in the NHS or other large organizations
• Substantial knowledge of NHS systems and legacy healthcare applications within the IT environment
• Knowledge of reviewing process/procedures and recommending change to secure hardware & Network security resilience.
• Record of accomplishment in developing agreed objectives and processes to increase efficiency of tasks in post
• Actively lead on project initiatives where security and data protection are key
• Analyses, investigates and resolves complex IM&T queries and issues/problems e.g., System errors, breaches of security or confidentiality, user requirements which may require configuration of software and hardware, unusual data trends, training requirements based on needs analysis
• Knowledge of security compliance regulations including GDPR, ISO 27001, Cyber Essentials, DCB1596 & DSPT
• Be well versed in system administration protocols and can adapt to managing several complex systems at once
• Extensive knowledge of Microsoft & Linux Operating Systems
• Knowledge of programming/scripting languages such as Python, VBScript, C#, C++, Java, Ruby, Node, Go and/or PowerShell

Communication & Relationships

• Ability to work under pressure and handle many different tasks at a time
• Ability to communicate effectively complex information, to a wider audience
• Ability to work both autonomously or in a team environment where appropriate
• Work to support less experienced IT staff
• Excellent interpersonal and communication skills

Our vision is to provide One Culture of Care for one another in order that we can provide compassionate care for the people who use our services. We are passionate about creating a workplace where we work together to get results, encouraging colleagues to have their say, in order to co create the change we want to see. We take pride in the diversity of our workforce that’s why we encourage applications from all. Reasonable adjustments will be made for disabled applicants.

We understand that more applicants are using AI technology to help with their applications. While these tools can be useful, they cannot fully capture your skills, knowledge, and experience. It’s important that you personalise your application. Relying solely on AI is not recommended, as it may reduce your chances of success. Our screening process is thorough, so if you have used AI, please make sure to disclose this on your application form.

Candidates who require a Skilled Worker visa to work in the United Kingdom can determine the likelihood of obtaining a Certificate of Sponsorship for this position by assessing their circumstances against the criteria specified on the Check if you need a UK visa - GOV.UK website. We encourage all applicants to review these criteria carefully to understand their eligibility for sponsorship.

If you are appointed to a post, information will also be transferred into the NHS Electronic Staff Records system. The Inter-Authority Transfer (IAT) process is a critical and beneficial component of ESR and following interview your previous NHS employment data, if applicable will be transferred from your current / most recent employer.

You may be required to undertake a DBS. The Trust will administer the DBS check on your behalf and will recover the cost (Enhanced £46.40, Standard £25.40 or Basic £25.40) from your salary when you commence in post (including Internal staff). You will also be required to participate in the DBS Update Service and pay the £15 cost per year. This is a condition of your employment.

CHFT is part of the West Yorkshire Association of Acute Trusts (WYAAT), a collaborative of the NHS hospital trusts from across West Yorkshire and Harrogate working together to provide the best possible care for our patients.

If you have any questions please contact [e-mail] for assistance.