Cyber Security Consultant

National Health Service; Leeds; Hybrid; GBP 61,000 - 101,000; Full time

Benefits offered by this job

Flexible working options

Office base in Leeds or Exeter

Job summary

NHS England is seeking a Senior Cyber Security Advisor (Band 8a) to join our Security Consulting (Secure) team. The role is based in Leeds or Exeter with flexible working options, including full-time, part-time and job share, and a 40% office presence.

You will provide expert cyber security consultancy to programmes, conduct threat modelling and risk analysis, and guide secure architecture and governance across the technology lifecycle to protect patient data and public trust.

Qualifications

• Extensive knowledge of techniques, roles, and responsibilities in providing technical or business guidance to clients, both internal and external, with the ability to apply this knowledge appropriately to diverse situations.
• Proven knowledge of the processes, tools and techniques of information security management, including the ability to deploy and monitor information security systems, detect, resolve and prevent IT security violations, and protect organisational data.
• Working knowledge of tools, techniques and processes of cybersecurity risk management, with the ability to ensure organisational network operation and minimise the negative effect of cybersecurity risks.
• Masters level degree in Cyber Security or a relevant subject, or equivalent level of experience.
• Working knowledge of the tools and processes for maintaining application security is desirable.
• Specialist knowledge of vulnerability assessment tools, techniques, models and systems is desirable.

Responsibilities

• Provide expert cyber security consultancy to programmes and services, ensuring solutions are secure by design and resilient to evolving cyber threats.
• Conduct threat modelling, security assessments and risk analysis, and recommend proportionate controls to reduce likelihood and impact.
• Provide authoritative guidance on security architecture, standards and patterns, embedding effective governance and controls across the technology lifecycle.
• Work collaboratively across technical and non-technical teams to resolve complex challenges, influence decisions and strengthen cyber resilience outcomes.
• Champion a strong security culture and support delivery teams to build secure systems from the outset.
• Identify, assess and manage cyber risks, ensuring they are understood, tracked and mitigated in line with organisational and national standards.
• Apply technical expertise and creative problem-solving to protect patient data, support safe care and maintain public trust.

Skills

Security consultancy

Info security management

Cyber risk management

Threat modelling

Security architecture

Vulnerability assessment tools

Education

Masters in Cyber Security

Tools

DevOps

Support

Network

Security

Mobile

TDD

Web

Job description

Salary: £61,000 - 101,000 per year

Requirements

• Extensive knowledge of techniques, roles, and responsibilities in providing technical or business guidance to clients, both internal and external, with the ability to apply this knowledge appropriately to diverse situations.
• Proven knowledge of the processes, tools and techniques of information security management, including the ability to deploy and monitor information security systems, detect, resolve and prevent IT security violations, and protect organisational data.
• Working knowledge of tools, techniques, approaches and processes of cybersecurity risk management, with the ability to ensure organisational network operation and minimise the negative effect of cybersecurity risks.
• Masters level degree in Cyber Security or a relevant subject, or equivalent level of experience.
• Working knowledge of the tools and processes for maintaining application security is desirable.
• Specialist knowledge of vulnerability assessment tools, techniques, models and systems is desirable.

Responsibilities

• Provide expert cyber security consultancy to programmes and services, ensuring solutions are secure by design and resilient to evolving cyber threats.
• Conduct threat modelling, security assessments and risk analysis, and recommend proportionate controls to reduce likelihood and impact.
• Provide authoritative guidance on security architecture, standards and patterns, embedding effective governance and controls across the technology lifecycle.
• Work collaboratively across technical and non-technical teams to resolve complex challenges, influence decisions and strengthen cyber resilience outcomes.
• Champion a strong security culture and support delivery teams to build secure systems from the outset.
• Identify, assess and manage cyber risks, ensuring they are understood, tracked and mitigated in line with organisational and national standards.
• Apply technical expertise and creative problem-solving to protect patient data, support safe care and maintain public trust.

Technologies

• DevOps
• Support
• Network
• Security
• Mobile
• TDD
• Web

More:

We are NHS England, where cyber security is fundamental to delivering safe, reliable healthcare services to millions of people every day. Our Chief Information Security Office (CISO) Function plays a critical role in protecting national systems and enabling secure digital transformation across the NHS. As part of our Security Consulting (Secure) team, the Senior Cyber Security Advisor will help design and deliver secure, resilient national services at scale, working closely with programmes, project teams and DevOps teams. We offer a permanent role based in Leeds or Exeter, with flexible working options including full-time, part-time and job share, and colleagues with a contractual office base are expected to spend on average at least 40% of their time in our offices. This role is Band 8a on Agenda for Change, includes a Recruitment and Retention Premia payment, and is aligned to our wider public service mission to support high-quality NHS care.

last updated 36 week of 2026