ICT Senior Security Analyst

Imperial College Healthcare NHS Trust; London Borough of Hammersmith and Fulham; On-site; GBP 45,000 - 62,000; Full time

Benefits offered by this job

Career development

Flexible working

Wellbeing

Cycle to Work

Car lease

Season ticket loan

Onsite leisure facilities

Job summary

Imperial College Healthcare NHS Trust is seeking a Cyber Security Analyst to protect and secure digital systems across our hospitals. You will monitor threats, collaborate with operational teams, and implement security measures to safeguard patient data and services.

You'll work with a proactive approach to evolving threats, overseeing risk registers and coordinating with external security providers, with opportunities to influence security policy and DSPT compliance across the Trust.

Qualifications

• Computing/IT degree or equivalent experience.
• Related cyber security certification.
• Cyber security certifications, SSCP, CISM, CISSP.
• Industry recognised qualifications in Networking and Firewalls.
• Industry recognised qualifications in Server, Workstation, Active Directory, Cloud and/or Storage technologies.

Responsibilities

• Assess security risks with technical operations teams and mitigate threats.
• Plan, test and implement upgrades and maintenance with technical teams.
• Assess NHS Cyber Alerts and respond with other teams to mitigate.
• Maintain the cyber security risk register and related reports.
• Coordinate with external security providers and independent assessments.
• Support DSPT submission and develop additional security controls and policies.

Skills

Cyber security

Networking

Active Directory

Windows

Threat analysis

Education

Computing/IT degree

Cyber security certification

Tools

Firewalls

MS Server/AD

Security tooling

Job description

Fulfil your potential in hospitals that make history:

Charing Cross, Hammersmith, St Mary’s, Queen Charlotte’s & Chelsea and Western Eye.

With five world-renowned hospitals, Imperial College Healthcare NHS Trust is full of opportunity if you are looking to develop your healthcare career.

We are an NHS Trust of approximately 16,000 people, providing care for over a million and a half patients from north west London and beyond every year.

We have a rich heritage and an ambitious vision for the future of our patients and local communities.

With our partners, Imperial College London, and The Royal Marsden NHS Foundation Trust, we form Imperial College Academic Health Science Centre, one of 6 academic health science centres in the UK, working to ensure the rapid translation of research for better patient care and excellence in education.

We are proud of our heritage in innovation and we are early adopters of new insights in technologies, techniques and treatments for improving health.

Job overview

The cyber security analyst is an exciting role within the cyber security team, ensuring the overall digital safety and security of Imperial College Healthcare NHS Trust.

The analyst keeps informed with the constantly changing wider cyber security environment, through a pro-active approach to understanding new threats and exploring new technologies. Technically skilled and responsible for the provision and security for all cyber security toolsets, the cyber security analyst works closely with the Trust's technical operational teams and operations teams, to report on and mitigate threats to the trust.

Main duties of the job

Working closely with technical operations teams to assess and mitigate any outstanding security risks to the trust. In addition to planning, testing and implementing specific upgrades and maintenance, with the technical operational teams.

Assessing any NHS Cyber Alerts that effect the trust, responding to and mitigating with other teams, where necessary.

Maintaining the trusts Cyber security risk register and related reports.

Co-ordinating with external security providers, including the provision of regular independent assessments of the trusts overall cyber security risk.

Providing support to assist with the trust annual data security and protection toolkit (DSPT) submission and developing additional security controls and/or policies where gaps exist as the DSPT continues to evolve.

Investigate, review, adopt and use new cyber security technologies and toolsets and advise on how the Trusts overall cyber security standpoint can be improved.

Works closely with operations teams to understand and minimise any potential service impact of system upgrades and risk mitigation strategies.

Oversee identity and access management to trust information systems, ensuring least privilege principles.

Working for our organisation

At Imperial College Healthcare you can achieve extraordinary things with extraordinary people, working with leading clinicians pushing boundaries in patient care.

Become part of a vibrant team living our values - expert, kind, collaborative and aspirational. You’ll get an experience like no other and will fast forward your career.Benefits include career development, flexible working and wellbeing, staff recognition scheme. Make use of optional benefits including Cycle to Work, car lease schemes, season ticket loan or membership options for onsite leisure facilities.

We are committed to equal opportunities and improving the working lives of our staff and will consider applications to work flexibly, part time or job share. Please talk to us at interview.

Environmental sustainability
Climate change and poor air quality is a health emergency that harms people’s health and wellbeing and widens health inequalities. The Trust is also committed to reducing its impact on the environment by reducing our greenhouse gas emissions to Net Zero by 2045. All our employees have a role to play, and we have an active green network that supports staff to act in ways that ensures that our services are efficient, sustainable and reduce our impact on the environment www.imperial.nhs.uk/about-us/our-strategy/green-plan .

Detailed job description and main responsibilities

The full job description provides an overview of the key tasks and responsibilities of the role and the person specification outlines the qualifications, skills, experience and knowledge required.

For both overviews please view the Job Description attachment with the job advert.

Person specification

• Computing/IT Degree or equivalent experience
• Related cyber security certification
• Cyber security certification, SSCP, CISM, CISSP
• Industry recognised qualifications in Networking and Firewalls
• Industry recognised qualifications in Server, Workstation, Active Directory, Cloud and/or Storage technologies

Experience

• Experience in project, programme, and portfolio management
• Experience engaging with NHS England, NCSC, and 3rd party vendors/suppliers to deliver security initiatives.
• Experience in developing and managing cyber security policies and procedures; and quality improvement initiatives
• Experience in cyber security incident planning and response
• Experience in cyber security investigations including threat analysis
• Experience of vendor/supplier selection and contract management
• Experience in running cyber security exercises to test response plans

Skills/knowledge/ abilities

• Sound knowledge and ability to implement best practice security principles and technologies
• Sound technical understanding of networking and Microsoft Server architecture, active directory, Windows
• Knowledge of NHS Data Security Standards including Data Security and Protection Toolkit requirements
• Knowledge and understanding of ISO/IEC 27000-series of standards
• Knowledge and understanding of Cyber Essentials Plus certification requirements and process

Right to work

If you need sponsorship to work in the UK, please visit the Home Office website for information on sponsorship and visa status before you fill in your application form. Due to recent changes in the UK immigration rules which affect Skilled Worker Visas, Global Business Mobility, Higher Skill Level and Increased Salary Thresholds, please ensure that you are able to meet the requirements to live and work in the UK before applying. Further information about eligibility is available on UK Visas and Immigration - GOV.UK

We operate a joint recruitment hub across the North West London Acute Provider Collaborative Group. As part of this, your application and personal data may be shared with partner trusts within the group for recruitment and workforce purposes, in line with general data protection regulation (GDPR).

Vacancy Closing Date

This vacancy may close before the current listed closing date. You are advised not to delay submitting your completed application.

Recruitment fraud warning

Imperial College Healthcare NHS Trust does not charge any fees for job applications, recruitment processes, sponsorship arrangements or offers of employment. All legitimate recruitment communications and applications will be made through our official careers website and published contact details. If you receive a job offer or recruitment communication requesting payment, please do not make any payment and verify it with us using the contact details published on our official careers website.

Please ensure you check your emails regularly as this is how we will communicate with you throughout the recruitment process. If you are shortlisted you will be contacted by email and text message (if you provide a mobile contact number).