ICT Senior Security Analyst
Job summary
The cyber security analyst is an exciting role within the cyber security team, ensuring the overall digital safety and security of Imperial College Healthcare NHS Trust.
The analyst keeps informed with the constantly changing wider cyber security environment, through a pro-active approach to understanding new threats and exploring new technologies. Technically skilled and responsible for the provision and security for all cyber security toolsets, the cyber security analyst works closely with the Trust's technical operational teams and operations teams, to report on and mitigate threats to the trust.
Main duties of the job
Working closely with technical operations teams to assess and mitigate any outstanding security risks to the trust. In addition to planning, testing and implementing specific upgrades and maintenance, with the technical operational teams.
Assessing any NHS Cyber Alerts that effect the trust, responding to and mitigating with other teams, where necessary.
Maintaining the trusts Cyber security risk register and related reports.
Co-ordinating with external security providers, including the provision of regular independent assessments of the trusts overall cyber security risk.
Providing support to assist with the trust annual data security and protection toolkit (DSPT) submission and developing additional security controls and/or policies where gaps exist as the DSPT continues to evolve.
Investigate, review, adopt and use new cyber security technologies and toolsets and advise on how the Trusts overall cyber security standpoint can be improved.
Works closely with operations teams to understand and minimise any potential service impact of system upgrades and risk mitigation strategies.
Oversee identity and access management to trust information systems, ensuring least privilege principles.
About us
At Imperial College Healthcare you can achieve extraordinary things with extraordinary people, working with leading clinicians pushing boundaries in patient care.
Become part of a vibrant team living our values - expert, kind, collaborative and aspirational. You'll get an experience like no other and will fast forward your career.Benefits include career development, flexible working and wellbeing, staff recognition scheme. Make use of optional benefits including Cycle to Work, car lease schemes, season ticket loan or membership options for onsite leisure facilities.
We are committed to equal opportunities and improving the working lives of our staff and will consider applications to work flexibly, part time or job share. Please talk to us at interview.
Environmental sustainabilityClimate change and poor air quality is a health emergency that harms people's health and wellbeing and widens health inequalities. The Trust is also committed to reducing its impact on the environment by reducing our greenhouse gas emissions to Net Zero by 2045. All our employees have a role to play, and we have an active green network that supports staff to act in ways that ensures that our services are efficient, sustainable and reduce our impact on the environment www.imperial.nhs.uk/about-us/our-strategy/green-plan.
Job description
Job responsibilities
The full job description provides an overview of the key tasks and responsibilities of the role and the person specification outlines the qualifications, skills, experience and knowledge required.
For both overviews please view the Job Description attachment with the job advert.
Person Specification
Education/ qualifications
- Computing/IT Degree or equivalent experience
- Related cyber security certification
- Cyber security certification, SSCP, CISM, CISSP
- Industry recognised qualifications in Networking and Firewalls
- Industry recognised qualifications in Server, Workstation, Active Directory, Cloud and/or Storage technologies
Experience
- Experience in project, programme, and portfolio management
- Experience engaging with NHS England, NCSC, and 3rd party vendors/suppliers to deliver security initiatives.
- Experience in developing and managing cyber security policies and procedures; and quality improvement initiatives
- Experience in cyber security incident planning and response
- Experience in cyber security investigations including threat analysis
- Experience of vendor/supplier selection and contract management
- Experience in running cyber security exercises to test response plans
Skills/knowledge/ abilities
- Sound knowledge and ability to implement best practice security principles and technologies
- Sound technical understanding of networking and Microsoft Server architecture, active directory, Windows
- Knowledge of NHS Data Security Standards including Data Security and Protection Toolkit requirements
- Knowledge and understanding of ISO/IEC 27000-series of standards
- Knowledge and understanding of Cyber Essentials Plus certification requirements and process
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Certificate of Sponsorship
Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website.
From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants.
Employer details
Employer name
Imperial College Healthcare NHS Trust
Address
Charing Cross Hospital
Fulham Palace Road
London
W6 8RF
United Kingdom
Employer's website
https://www.imperial.nhs.uk/