EPRR Business Continuity Specialist (Cyber Focus)

University Hospitals Of Leicester Nhs Trust; Leicester; On-site; GBP 55,000 - 75,000; Full time

Job summary

University Hospitals of Leicester NHS Trust is seeking a dedicated EPRR Business Continuity Specialist (Cyber Focus) to lead the cyber resilience and business continuity programme. You will identify critical digital dependencies, conduct impact assessments, and develop robust continuity plans aligned with NHS England EPRR standards and NCSC guidance.

You will embed cyber-related continuity across CMGs and corporate services, designing training, exercises and simulations to strengthen

Responsibilities

• Lead the development, implementation and maintenance of the Trust's cyber resilience and business continuity programme.
• Identify critical digital dependencies and undertake business impact assessments to determine recovery priorities.
• Embed cyber-related continuity arrangements across CMGs and corporate services, testing local continuity plans.
• Design, deliver and facilitate training, exercises and simulations to strengthen preparedness and drive improvements.
• Contribute to major incident planning and provide specialist advice on the operational impacts of digital disruption.
• Collaborate with Digital, Information Governance, Cyber Security and external partners to strengthen organisational resilience.

Job description

TheEPRR Business Continuity Specialist (Cyber Focus) will lead the development and implementation of the Trust's cyber resilience and business continuity programme, ensuring the organisation can maintain safe and effective services during cyber-attacks, digital outages, and the loss of critical IT systems. Working closely with clinical, operational, digital and corporate teams, the post holder will identify critical digital dependencies, undertake business impact assessments, and develop robust continuity plans that align with NHS England EPRR standards, NCSC guidance, and wider organisational resilience requirements. The role will be responsible for embedding cyber-related business continuity arrangements across the Trust by supporting Clinical Management Groups (CMGs) and corporate services to develop, maintain and test local continuity plans. The post holder will design and facilitate training, exercises and simulations to strengthen preparedness, evaluate organisational readiness, and drive continuous improvement through the identification and implementation of lessons learned. They will also contribute to major incident planning and provide specialist advice on the operational impacts of digital disruption. As a key member of the EPRR function, the post holder will work collaboratively with Digital, Information Governance, Cyber Security and external partners to strengthen organisational resilience, provide assurance against regulatory requirements, and support the Trust's ability to respond to and recover from cyber incidents. The role will play a critical part in reducing patient safety, operational, financial and reputational risks associated with the increasing cyber threat facing NHS organisations.

• high-quality care for all,
• being a great place to work,
• partnerships for impact,
• research and education excellence

• we are compassionate,
• we are proud,
• we are inclusive, and
• we are one team

And we will embed health equality in all we do - taking active steps to reduce the avoidable differences in healthcare that some people face, working in partnership with communities. Our strategy is underpinned by new values and we will work to ensure they are an everyday reality for all:

This is an exciting moment as we look to the future with clarity on what we already do well and where we need to focus our energies to make an even bigger difference for the people we serve.

About the University Hospitals of Leicester NHS Trust

https://www.uhleicester.nhs.uk

Cyber Resilience and Business Continuity

The post holder will lead the development, implementation and maintenance of the Trust's Cyber-Attack Business Continuity Plan, ensuring alignment with NHS England EPRR standards, NCSC guidance, Data Security and Protection Toolkit (DSPT) requirements, and organisational resilience objectives. The post holder will work collaboratively with Clinical Management Groups (CMGs), Corporate Directorates, Digital & Data Services and key stakeholders to ensure appropriate arrangements are in place to maintain critical services during cyber incidents, digital outages and loss of key systems.

Business Impact Assessment and Digital Dependency Mapping

The post holder will facilitate and support Business Impact Assessments across clinical and corporate services to identify critical activities, recovery priorities, key dependencies and acceptable downtime periods. They will maintain an understanding of the Trust's critical digital systems and associated operational dependencies, ensuring continuity arrangements are proportionate to identified risks and vulnerabilities. The post holder will support the EPRR Team ensure the Trust has in place an ambitious EPRR Work Programme with the aim of ensuring continued improvement and establishing best practice within EPRR.

Assurance, Governance and Compliance

The post holder will support the provision of assurance regarding business continuity and cyber resilience arrangements through the monitoring, review and reporting of compliance with relevant legislation, national guidance and Trust policies. The post holder will prepare reports, briefings and assurance documentation for committees, senior managers and other governance groups as required. The post holder will support the EPRR Team in the development of robust plans which in turn, will support the Trust and its stakeholders to respond to incidents and emergencies.

Service and CMG Support

The post holder will work closely with CMGs and Corporate Directorates to develop, review and maintain local business continuity plans, ensuring that services are prepared to respond effectively to the loss of critical digital systems and other major disruptions. They will provide specialist advice and guidance to managers and service leads on continuity planning, resilience improvement and recovery arrangements.

Working with Digital and Cyber Teams

The post holder will establish strong working relationships with Digital & Data Services, Information Governance and Cyber Security colleagues to ensure continuity and recovery arrangements are aligned with technical disaster recovery and cyber incident management plans. The post holder will support the review and development of recovery strategies, recovery priorities and system restoration arrangements for critical Trust services.

Learning and Continuous Improvement

The post holder will contribute to the identification, capture and implementation of lessons identified from incidents, exercises, audits and assurance reviews, ensuring that improvements are embedded into plans, policies, procedures and training programmes.

Policy

The post holder will support with the ongoing development, review, and implementation of the Trust's Business Continuity Management Policy. This should ensure the relevant requirements of NHS England's core standards for EPRR and ISO:22301 are implemented across the organisation as required.

Support UHL Response to Incidents

The post holder will provide support and advice during incidents to the Trust's incident coordination teams.

Professional Relationships

The post holder may need to represent the Trust and promote UHL and the EPRR Teams' interests in multi-agency meetings. This may include disseminating relevant information as well as developing and maintaining effective working relationships with stakeholders.

Information

The post holder will deal with sensitive and confidential material from both within the Trust and other Category 1 and 2 responders.

Personal Development

The post holder will be responsible for undertaking personal development and training to enhance skills and expertise and to maintain up-to-date knowledge of legislation and policies relating to all aspects of EPRR, including business continuity.