ICT Senior Security Analyst

Imperial College Healthcare NHS Trust; London Borough of Hammersmith and Fulham; On-site; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Cycle to Work (optional)

Job summary

Imperial College Healthcare NHS Trust is seeking a Cyber Security Analyst to join the cyber security team, ensuring digital safety across the Trust. You will work with technical operations to assess risks, plan upgrades, and respond to alerts, while maintaining the cyber security risk register and coordinating independent assessments.

The role involves implementing security controls, supporting the DSPT, and exploring new technologies to improve the Trust's security posture, including identity

Qualifications

• Degree or equivalent experience in computing/IT or related field.
• Cyber security certifications (SSCP, CISM, CISSP or equivalent) preferred.
• Strong understanding of security principles and network basics.
• Knowledge of NHS DSPT requirements and ISO/IEC 27000-series.

Responsibilities

• Assess and mitigate security risks with technical operations teams.
• Plan, test, and implement upgrades and maintenance with operational teams.
• Assess NHS Cyber Alerts and coordinate responses with other teams.
• Maintain cyber security risk register and related reports.
• Coordinate with external security providers and independent assessments.
• Support DSPT submission and develop security controls/policies.
• Investigate new cyber technologies and advise on improvements.
• Work with operations to minimise service impact of upgrades.
• Oversee identity and access management with least privilege.

Education

Degree or equivalent (Computing/IT)

Cyber security certifications

Solid knowledge of security principles

Networking knowledge

Microsoft Server / Active Directory understanding

Data Security Standards / DSPT awareness

Job description

The cyber security analyst is an exciting role within the cyber security team, ensuring the overall digital safety and security of Imperial College Healthcare NHS Trust.

The analyst keeps informed with the constantly changing wider cyber security environment, through a pro-active approach to understanding new threats and exploring new technologies. Technically skilled and responsible for the provision and security for all cyber security toolsets, the cyber security analyst works closely with the Trust's technical operational teams and operations teams, to report on and mitigate threats to the trust.

Main duties of the job

Working closely with technical operations teams to assess and mitigate any outstanding security risks to the trust. In addition to planning, testing and implementing specific upgrades and maintenance, with the technical operational teams.

Assessing any NHS Cyber Alerts that effect the trust, responding to and mitigating with other teams, where necessary.

Maintaining the trusts Cyber security risk register and related reports.

Co-ordinating with external security providers, including the provision of regular independent assessments of the trusts overall cyber security risk.

Providing support to assist with the trust annual data security and protection toolkit (DSPT) submission and developing additional security controls and/or policies where gaps exist as the DSPT continues to evolve.

Investigate, review, adopt and use new cyber security technologies and toolsets and advise on how the Trusts overall cyber security standpoint can be improved.

Works closely with operations teams to understand and minimise any potential service impact of system upgrades and risk mitigation strategies.

Oversee identity and access management to trust information systems, ensuring least privilege principles.

About us

At Imperial College Healthcare you can achieve extraordinary things with extraordinary people, working with leading clinicians pushing boundaries in patient care.

Become part of a vibrant team living our values - expert, kind, collaborative and aspirational. You'll get an experience like no other and will fast forward your career.Benefits include career development, flexible working and wellbeing, staff recognition scheme. Make use of optional benefits including Cycle to Work, car lease schemes, season ticket loan or membership options for onsite leisure facilities.

We are committed to equal opportunities and improving the working lives of our staff and will consider applications to work flexibly, part time or job share. Please talk to us at interview.

Environmental sustainabilityClimate change and poor air quality is a health emergency that harms people's health and wellbeing and widens health inequalities. The Trust is also committed to reducing its impact on the environment by reducing our greenhouse gas emissions to Net Zero by 2045. All our employees have a role to play, and we have an active green network that supports staff to act in ways that ensures that our services are efficient, sustainable and reduce our impact on the environment www.imperial.nhs.uk/about-us/our-strategy/green-plan.

Job responsibilities

The full job description provides an overview of the key tasks and responsibilities of the role and the person specification outlines the qualifications, skills, experience and knowledge required.

For both overviews please view the Job Description attachment with the job advert.

Person Specification

• Computing/IT Degree or equivalent experience
• Related cyber security certification
• Cyber security certification, SSCP, CISM, CISSP
• Industry recognised qualifications in Networking and Firewalls
• Industry recognised qualifications in Server, Workstation, Active Directory, Cloud and/or Storage technologies

Experience

• Experience in project, programme, and portfolio management
• Experience engaging with NHS England, NCSC, and 3rd party vendors/suppliers to deliver security initiatives.
• Experience in developing and managing cyber security policies and procedures; and quality improvement initiatives
• Experience in cyber security incident planning and response
• Experience in cyber security investigations including threat analysis
• Experience of vendor/supplier selection and contract management
• Experience in running cyber security exercises to test response plans

Skills/knowledge/ abilities

• Sound knowledge and ability to implement best practice security principles and technologies
• Sound technical understanding of networking and Microsoft Server architecture, active directory, Windows
• Knowledge of NHS Data Security Standards including Data Security and Protection Toolkit requirements
• Knowledge and understanding of ISO/IEC 27000-series of standards
• Knowledge and understanding of Cyber Essentials Plus certification requirements and process

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.