Health & Care System Cyber Security Compliance Lead - Joint Cyber Unit

Job description

Job responsibilities

As a a Health and Care System Cyber Security Compliance Lead within the Joint Cyber Unit, the post holder will work as part of a dynamic team in delivering an effective service supporting cyber security risk reduction across the health and care system.

The post holder will lead the provision of an efficient, effective, and high quality professional and well-coordinated system wide Health and Care cyber security compliance service capable of meeting all statutory, regulatory and NHS requirements ensuring alignment with the activity of the organisation.

The post holder will be responsible for:

• Provide team leadership and subject matter expertise in security compliance.
• Oversee team workload and capacity, collaborating with other leaders to align resources and priorities.
• Lead the delivery of a responsive, high quality cyber security compliance service.
• Drive remediation of cross-cutting security issues through the design and continuous delivery of security improvement plans.
• Partner with regional stakeholders to strengthen cyber maturity and organisational resilience.
• Coordinate cyber security compliance activities across a diverse stakeholder base to drive meaningful security improvement and maintain clear lines of communication.
• Scope and assess the security posture of Health and Care Organisations taking an evidence based approach
• Develop and manage security compliance metrics to inform evidence based decision making
• Lead compliance activities aligned with key frameworks and legislation such as: NCSC CAF, NIS Regulations, and the DSPT.
• Providing cyber security expertise supporting the development, implementation, and monitoring of the compliance service.
• Providing comprehensive compliance plans and progress reports to the relevant Boards as per the agreed reporting schedule and on an ad hoc basis as required
• Working closely with other leads and sponsor directors to ensure interdependencies across all compliance areas are considered and actions aligned
• Managing the day-to-day activities of the compliance service as well as contribute specialist knowledge to develop effective strategy and operational policies
• Engaging with key strategic regional and national policy makers to inform development of strategy and policies
• Identifying examples of national and international best practice and to ensure that benefits from relevant innovations in healthcare are realised
• Developing and champion new initiatives or projects as necessary
• Ensuring that the team members work cohesively within the team and with other programmes.
• Providing leadership, direction, and support to ensure a consistent approach through programme management to delivering organisational objectives.

The post of Health and Care System Cyber Compliance Lead has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 30% per annum.

Please be aware that RRP is non-contractual and subject to review.

Please note that the reason for the fixed term of this contract is covering vacancy.

National Security Vetting

Important: Please be aware there are residency requirements you need to meet:

All NHS England Cyber Security personnel must hold SC level as a minimum.

To meet National Security Vetting requirements, SC clearances require 5 years continuous UK residency. In certain cases, this can be reduced to three years continuous UK residency, with additional overseas checks for the previous two years.

Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered.

Please make sure you meet these requirements before applying for this role. You dont need to have SC already, however, failure to achieve the requirements for SC after offer, will result in the job offer being withdrawn.

For further advice please check https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels/national-security-vetting-clearance-levels#security-check-sc.

For further information on National Security Vetting please check National security vetting: clearance levels - GOV.UK, information on the Security Vetting and Clearances Intranet page or contact england.securityvetting@nhs.net.

You can find further details about the role, including key responsibilities and accountabilities, alongside the organisational structure and person specification in the attached Job Description and other supporting documents.

Secondments

Applicants from within the NHS will be offered on a secondment basis only, agreement should be obtained from their employer prior to submitting the application.

Role Title

The job title advertised is for the purposes of advertising, the successful candidate(s) will be hired with the job title of Cyber Operations and Engagement Lead until a formal change can be made.

Person Specification

Qualifications

• CISSP/CISA/CISM/CRISC or equivalent qualification from a recognised security focussed professional body

Experience

• Extensive knowledge and experience of the strategies, frameworks, controls and processes used to encourage good cyber hygiene
• Extensive knowledge and experience of the processes, tools and techniques of information security management, ability to deploy and monitor information security systems, as well as detect, resolve and prevent violations of IT security, to protect organisational data.
• Extensive knowledge and experience of techniques, roles, and responsibilities in providing technical or business guidance to clients, both internal and external; ability to apply this knowledge appropriately to diverse situations.

• The post holder will have a strong track record in strategic and operational delivery within the NHS and social care, with in-depth knowledge, skills and experience in programme and project management.
• Experience leading change projects and programmes in health and/or social care environments.

Skills

• Provide and receive highly complex, sensitive and contentious information, negotiate with senior stakeholders on difficult and controversial issues, and present complex and sensitive information to large and influential groups.
• Negotiate on difficult and very complex and detailed issues.
• Highly developed team management, co-ordination, and motivation skills as well as excellent listening and negotiation skills.

• Ability to analyse complex facts and situations and develop a range of options.

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.

UK Registration

Applicants must have current UK professional registration. For further information please see NHS Careers website.

Employer details

Employer name

NHS England

Address

Wellington Place/ Wellington House

Leeds / London

LS1 4AP

Employer's website

https://www.england.nhs.uk/about/working-for/