Healthcare Cyber Security Analyst - Risk & Incident Response

Calderdale & Huddersfield NHS Foundation Trust; Elland; On-site; GBP 42,000 - 62,000; Full time

Benefits offered by this job

Public sector pension

Flexible working

Job summary

Calderdale and Huddersfield NHS Foundation Trust seeks a proactive Cyber Security Analyst to join our Health Informatics Service. You will work with the Cyber Security Manager to build a security program, identify and protect IT assets, and implement security controls across the estate.

You will conduct risk assessments, vulnerability testing, and third‑party risk reviews, while supporting policy enforcement and incident response.

Qualifications

• Experience in information security within healthcare environments.
• Ability to assess security risks and apply controls within complex IT environments.
• Knowledge of regulatory standards and security frameworks (DSP Toolkit, ISO27001).

Responsibilities

• Develop a security program addressing identified risks and business requirements.
• Identify IT assets needing security controls and define appropriate policies.
• Research, evaluate, design, test and plan deployment of new security hardware/software.
• Assist with risk assessments, vulnerability scanning, penetration testing and third-party risk reviews.
• Support compliance efforts and enforcement of security policies across the organisation.
• Monitor security solutions, triage incidents, and respond to production issues.

Skills

Cyber security

Threat analysis

Incident response

Risk assessment

Policy enforcement

Education

BSc in Computer Science

Tools

Nessus

Nmap

SIEM

Job description

Calderdale and Huddersfield NHS Foundation Trust seeks a proactive Cyber Security Analyst to join our Health Informatics Service. You will work with the Cyber Security Manager to build a security program, identify and protect IT assets, and implement security controls across the estate.

You will conduct risk assessments, vulnerability testing, and third‑party risk reviews, while supporting policy enforcement and incident response.