Cyber Security Specialist

Cardiff and Vale University Health Board; Peterborough; On-site; GBP 50,000 - 70,000; Full time

Job summary

Cardiff and Vale University Health Board is seeking a Cyber Security Specialist to lead day-to-day management of cyber security incidents, working with Digital teams to provide guidance on risks and mitigations.

The role strengthens cyber security maturity, ensures compliance with standards, and embeds information security policies in everyday practice across the organisation.

Qualifications

• IT Degree or equivalent experience
• IT qualification or Recognised information security industry-specific qualification (e.g. CISMP) or Recognised risk management industry-specific qualification (e.g. PCIRM)
• Experience of coaching and/or training other staff
• Excellent investigatory and fault-diagnosis skills
• Excellent written, verbal and electronic communication skills
• Good personal organisation skills with the ability to manage a high workload with multiple concurrent projects
• Ability to work unsupervised to investigate and deliver solutions to complex requirements
• Knowledge of risk analysis, risk management and risk controls in a healthcare setting
• Knowledge and understanding of the healthcare sector and current technologies within healthcare environments
• Awareness of ISO27001 processes
• Experience with NHS applications, systems and/or Medical Devices

Responsibilities

• Operational Cyber Security Management
• Risk Management and Assurance
• Information Security Governance and Policy
• Audit, Compliance, and Lifecycle Security
• Stakeholder Engagement and Collaboration

Job description

The Cyber Security Specialist plays a central operational role in the day-to-day management of cyber security, taking ownership of the investigation, diagnosis, and remediation of security incidents arising from both user activity and automated systems. Working closely with Digital teams and the Cyber Security function, the role provides practical, professional, and technical guidance on cyber security risks and mitigation, supporting informed decision-making across the organisation. This role is instrumental in strengthening the Trust's cyber security maturity, driving improved compliance with recognised cyber security standards and supporting the continuous enhancement of the organisation's security posture. As a Cyber Security Specialist, you would play a key role in shaping and embedding effective data and information security policies and procedures, ensuring they remain practical, relevant, and fully integrated into everyday operational practice., Main headings for responsibilities are: 1. Operational Cyber Security Management 2. Risk Management and Assurance 3. Information Security Governance and Policy 4. Audit, Compliance, and Lifecycle Security 5. Stakeholder Engagement and Collaboration, Please refer to job description and person specification for full details or key responsibilities for this role.

• IT Degree or equivalent experience, IT qualification or Recognised information security industry-specific qualification (e.g. for example CISMP) or Recognised risk management industry-specific qualification, for example PCIRM
• A recognised qualification in IT Service Management e.g. ITIL Foundation certificate or equivalent experience, In-depth professional experience of working in an I.T., information security, information governance, or risk-related role, Experience of coaching and/or training other staff
• Experience working with antivirus, firewall, web-filtering, email, backup, or networking technologies
• Practical hands-on experience working with ISO27001 processes
• Experience working with NHS applications, systems and/or Medical Devices, Understanding of the main goals of information security management
• Excellent general IT skills with accurate keyboard skills
• Excellent investigatory and fault-diagnosis skills, demonstrating a logical and structured approach
• Excellent written, verbal and electronic communication skills
• Good personal organisation skills with the ability to effectively manage a high workload with multiple concurrent projects & initiatives
• The ability to effectively prioritise and co-ordinate own work and that of the team
• Self-motivated - Able to work unsupervised to investigate and deliver solutions to complex requirements, but retain the confidence to escalat
• Able to work proactively both as part of a team and individually, Understanding of the main concepts of risk analysis and control methods and how to apply them
• Knowledge of risk analysis, risk management and risk controls in a healthcare setting
• Knowledge and understanding of the healthcare sector and of current & developing technologies within healthcare environments
• Application of the main techniques of risk analysis, risk management and risk control
• Excellent influencing & negotiation skills
  Priority will be given to colleagues identified as at risk through the Trust's redeployment process.