Cyber Security Manager

NHS Supply Chain; Nottingham; Hybrid; GBP 52,000 - 70,000; Part time

Benefits offered by this job

Hybrid working

Annual bonus scheme

Generous pension

Paid volunteering leave

Employee Assistance Programme

Job summary

NHS Supply Chain is seeking a Cyber Security Manager to lead the Vulnerability Management Service and drive risk-based remediation across the technology estate. The role operates in a SIAM model with oversight of multiple providers and a focus on regulatory compliance and resilience.

You will own strategy, policy, and standards for vulnerability management and collaborate with internal teams to protect critical services while supporting transformation and business goals.

Qualifications

• Proven leadership and influential abilities.
• Strong supplier and stakeholder management capabilities.
• Strong analytical and risk assessment skills.
• Ability to communicate cyber risks to non-technical audiences.
• Excellent reporting and presentation skills.
• Ability to challenge constructively and drive accountability.

Responsibilities

• Own and develop Vulnerability Management Strategy, Framework, Policies and Standards.
• Lead the delivery and continuous improvement of vulnerability management capabilities.
• Drive governance across vulnerability identification, assessment, prioritisation, remediation, exception management and reporting.
• Act as Service Owner for Vulnerability Management within the SIAM model.
• Coordinate activities across multiple service providers to ensure effective remediation.
• Hold suppliers accountable for delivery against targets and contractual obligations.

Skills

Leadership

Supplier management

Risk assessment

Communication

Reporting

Stakeholder management

Organisation & prioritisation

Education

CISSP

CISM

CRISC

GIAC

ITIL Foundation

SIAM Foundation

ISO 27001 Lead Auditor/Lead Implementer

CAF knowledge

Job description

Job Title: Cyber Security Manager
Function: Cyber Security
Location: Hybrid Worker – Expectation is two days per week on site at our Nottingham office
Contract type: 6 Month Fixed Term Contract
Salary: Offered on a starting salary of £ 60,994
Closing Date: Thursday 17th September
Hiring Manager: Rachel Million – Head of Cyber Security
Talent Engagement Partner - Merrina Parker

NHS Supply Chain currently has an opportunity for a Cyber Security Manager to join our team during an exciting period of transformation, working to make it easier for the NHS to put patients first.

The NHS Supply Chain Cyber Security Team continues to evolve and expand its capabilities to support organisational resilience and secure service delivery.

The Cyber Security Manager is responsible for leading and continuously improving NHS Supply Chain’s Vulnerability Management Service, ensuring cyber security vulnerabilities are identified, assessed, prioritised, remediated and reported in a timely and risk-based manner across the technology estate.

Working within a Service Integration and Management (SIAM) operating model, the role will provide oversight and governance across multiple managed service providers, including the Cyber Security Service Provider (CSSP), infrastructure, application and modern workplace providers.

The postholder will act as the authority for vulnerability management, ensuring that cyber risks are understood, communicated and addressed in a manner that protects critical services, while supporting regulatory compliance and operational resilience.

Every day you will …

• Own and develop the organisation's Vulnerability Management Strategy, Framework, Policies and Standards
• Lead the delivery and continuous improvement of vulnerability management capabilities across the organisation
• Drive governance processes covering vulnerability identification, assessment, prioritisation, remediation, exception management and reporting.
• Act as Service Owner for Vulnerability Management within the SIAM model.
• Coordinate activities across multiple service providers to ensure effective identification and remediation of vulnerabilities.
• Hold suppliers accountable for delivery against agreed vulnerability remediation targets and contractual obligations

What can we offer you?

• Hybrid working opportunities, giving you the flexibility to work collaboratively in the office and remotely.
• We recognise our employees' hard work and contributions with annual bonus schemes, long service, and colleague recognition awards.
• 27 days holiday plus bank holidays
• We are dedicated to your development, through in-house training, support, and access to external qualifications to maximise your potential.
• A focus on your well-being offering 1 day of paid well-being leave and free access to the 24/7 Employee Assistance Programme
• Generous pension scheme (with us contributing 12% when you contribute 6%)
• Access to our Flexible Benefits Scheme, where you can choose from a variety of benefits such as Life Insurance, Critical Illness Cover, Income Protection, Health Cash Plan, Dental Insurance, and additional pension contributions that suit you.
• 2 days of paid volunteering leave allowing you to give back to your community.
• Access to many discounts from the Blue Light Card to NHS Discounts.

NHS Supply Chain, who are we?

Our role is to support the NHS to save lives and improve health. We are a part of the NHS family, and our role is to source, deliver and supply healthcare products, services and food for NHS trusts and healthcare organisations across England and Wales.

We serve every NHS Trust and operate a national network of distribution centres, managing relationships with more than a thousand suppliers and delivering more than 8,000,000 orders each year to more than 17,000 locations.Doing all of this on behalf of the NHS gives NHS staff more time to focus on their main priority of providing excellent patient care.

What skills will help you thrive in this role?

• Strong leadership and influencing skills.
• Excellent supplier and stakeholder management capabilities.
• Strong analytical and risk assessment skills.
• Ability to communicate technical cyber risks to non-technical audiences.
• Excellent reporting and presentation skills.
• Ability to challenge constructively and drive accountability.
• Strong organisational and prioritisation skills.
• Desirable qualifications: CISSP, CISM, CRISC, GIAC certification, ITIL Foundation, SIAM Foundation, ISO 27001 Lead Auditor or Lead Implementer, Cyber Assessment Framework (CAF) knowledge

Our Inclusive Commitment

At NHS Supply Chain, we are committed to building an inclusive environment where difference is not only valued, but celebrated, giving everyone the opportunity to thrive in their career. Developing our people is key to our success, so if this role sounds like the right next step in your career but your experience doesn’t match perfectly with the job advert, we encourage you to still apply.

SCCL is a company Registered in England and Wales, with company number 10881715, to act as the management function of the NHS Supply Chain.