Cyber Security GRC Advisor: Risk, Policy & Compliance

NHS England; Leeds, Exeter, Greater London; On-site; GBP 59,000 - 68,000; Full time

Job summary

NHS England is seeking a Cyber Security Advisor (GRC) to strengthen governance, risk and compliance across the organisation. The role supports the Cyber Operations Business Plan, develops security metrics, and advises on secure-by-design practices to protect critical care information and public trust.

Based in the NHS England security function, the post emphasises evidence-based decision making, cross-team collaboration, and ensuring policy alignment with regulatory requirements.

Responsibilities

• Work with and support Cyber Security Leads to deliver against NHSE Security Model and Cyber Operations Business Plan, reducing overall security risk.
• Engage diverse stakeholders on GRC activities to drive improvements, acting as a contact and ensuring risks are prioritised and managed.
• Support development and management of key security metrics, dashboards and reporting for informed decisions.
• Provide support to system and service development teams to ensure secure by design and continual assurance.
• Support creation, development and review cycles of data security policies, standards and guides for systems and services.
• Support cyber security governance and assurance activities, producing papers, tracking actions and reporting to senior stakeholders.
• Undertake research and use data to inform decision making on data security best practice.
• Support the organisation with security advice and guidance to NHS England ensuring cyber resilience.

Job description

NHS England is seeking a Cyber Security Advisor (GRC) to strengthen governance, risk and compliance across the organisation. The role supports the Cyber Operations Business Plan, develops security metrics, and advises on secure-by-design practices to protect critical care information and public trust.

Based in the NHS England security function, the post emphasises evidence-based decision making, cross-team collaboration, and ensuring policy alignment with regulatory requirements.