EPRR Business Continuity Specialist (Cyber Focus)

Job description

Job responsibilities

Cyber Resilience and Business Continuity

The post holder will lead the development, implementation and maintenance of the Trust's Cyber-Attack Business Continuity Plan, ensuring alignment with NHS England EPRR standards, NCSC guidance, Data Security and Protection Toolkit (DSPT) requirements, and organisational resilience objectives.

The post holder will work collaboratively with Clinical Management Groups (CMGs), Corporate Directorates, Digital & Data Services and key stakeholders to ensure appropriate arrangements are in place to maintain critical services during cyber incidents, digital outages and loss of key systems.

Business Impact Assessment and Digital Dependency Mapping

The post holder will facilitate and support Business Impact Assessments across clinical and corporate services to identify critical activities, recovery priorities, key dependencies and acceptable downtime periods.

They will maintain an understanding of the Trust's critical digital systems and associated operational dependencies, ensuring continuity arrangements are proportionate to identified risks and vulnerabilities.

The post holder will support the EPRR Team ensure the Trust has in place an ambitious EPRR Work Programme with the aim of ensuring continued improvement and establishing best practice within EPRR.

Assurance, Governance and Compliance

The post holder will support the provision of assurance regarding business continuity and cyber resilience arrangements through the monitoring, review and reporting of compliance with relevant legislation, national guidance and Trust policies.

The post holder will prepare reports, briefings and assurance documentation for committees, senior managers and other governance groups as required.

The post holder will support the EPRR Team in the development of robust plans which in turn, will support the Trust and its stakeholders to respond to incidents and emergencies.

Service and CMG Support

The post holder will work closely with CMGs and Corporate Directorates to develop, review and maintain local business continuity plans, ensuring that services are prepared to respond effectively to the loss of critical digital systems and other major disruptions.

They will provide specialist advice and guidance to managers and service leads on continuity planning, resilience improvement and recovery arrangements.

Working with Digital and Cyber Teams

The post holder will establish strong working relationships with Digital & Data Services, Information Governance and Cyber Security colleagues to ensure continuity and recovery arrangements are aligned with technical disaster recovery and cyber incident management plans.

The post holder will support the review and development of recovery strategies, recovery priorities and system restoration arrangements for critical Trust services.

Learning and Continuous Improvement

The post holder will contribute to the identification, capture and implementation of lessons identified from incidents, exercises, audits and assurance reviews, ensuring that improvements are embedded into plans, policies, procedures and training programmes.

Policy

The post holder will support with the ongoing development, review, andimplementation of the Trusts Business Continuity Management Policy. This shouldensure the relevant requirements of NHS Englands core standards for EPRR andISO:22301 are implemented across the organisation as required.

Support UHL Response to Incidents

The post holder will provide support and advice during incidents to the Trustsincident coordination teams.

Professional Relationships

The post holder may need to represent the Trust and promote UHL and the EPRR

Teams interests in multi-agency meetings. This may include disseminating relevantinformation as well as developing and maintaining effective working relationshipswith stakeholders.

Information

The post holder will deal with sensitive and confidential material from both within theTrust and other Category 1 and 2 responders.

Personal Development

The post holder will be responsible for undertaking personal development and training to enhance skills and expertise and to maintain up-to-date knowledge of legislation and policies relating to all aspects of EPRR, including business continuity.

Please see job description/person specification for full details on the role.

Person Specification

Training and Qualifications

• Degree, NVQ level 4 in relevant subject or equivalent level qualification or significant experience of working at a similar level in the specialist area.
• Evidence of continuing professional development in EPRR, Business Continuity, Organisational Resilience, Cyber Resilience or related field.

• Diploma in Health Emergency Planning (DipHEP).
• Qualification in project management or management studies.
• Cyber resilience, cyber incident management or information governance training.
• Experience of working in specialist area for a minimum of 9 months.

Knowledge

• Knowledge and understanding of emergency planning legislation, including the Civil Contingencies Act 2004.
• Knowledge and understanding of emergency planning methodologies, incident management structures, command and control arrangements, and major incident response.
• Knowledge of cyber resilience principles and the operational impacts of cyber incidents on healthcare delivery.
• Knowledge and understanding of Cyber Resilience and Cyber Incident Management
• Experience of managing risks and reporting.

• Knowledge of Data Security and Protection Toolkit (DSPT) requirements.
• Knowledge of NHS digital systems and their role in clinical service delivery.
• Understanding of recovery time objectives, recovery priorities and critical service dependencies.

Experience

• Proven experience of writing reports.
• Experience of presenting complex information to a variety of people with different levels of understanding of presented topic.
• Ability to analyse complex issues where material may be conflicting and drawn from multiple sources.
• Experience of developing and implementing organisational resilience or business continuity improvement programmes.
• Experience of undertaking Business Impact Assessments and identifying critical service dependencies.
• Demonstrated capability to act upon incomplete information, using experience or critical thinking to make inferences and decision making.
• Demonstrated capability to manage own workload, to plan over short, medium and long- term and adjust plans and resource requirements accordingly.

• Experience working in the NHS or Public Sector.
• Experience of mapping digital system dependencies across complex organisations.
• Experience of developing, implementing and reviewing business continuity and emergency preparedness plans, including arrangements for cyber-related disruptions, in line with NHS England, NCSC and local organisational requirements.
• Experience of designing, delivering and evaluating exercises and simulations to test emergency preparedness, business continuity and cyber resilience arrangements, including identifying lessons learned and supporting continuous improvement.

Communication and Relationship Skills

• Ability to work independently and as part of a team.
• Ability to engage, influence and gain commitment from senior clinical, operational and corporate stakeholders.
• Excellent interpersonal communication skills at all levels.
• Ability to establish and maintain good working relationships with people from a wide variety of personal and professional backgrounds.
• You actively encourage and provide opportunities for others to share ideas and contributions.
• Values diversity and difference, operates with integrity and openness.
• Ability to communicate in a professional manner confidently and effectively both verbally and in written format.
• Ability to persuade and influence decision making.

• Ability to communicate confidently with people at all levels of seniority.
• Ability to diffuse challenging situations.

Analytical and Judgement Skills

• Commitment to and focused on quality, promotes high standards in all they do.
• Ability to analyse complex organisational interdependencies and prioritise recovery requirements.
• Consistently looks to improve what they do, looks for successful tried and tested ways of working, and seeks out innovation.
• Actively develops themselves and supports others to do the same.
• Evidence of continued professional development.
• Ability to think critically, prioritise, and recommend appropriate action through the assessment of relevant information.
• Ability to assess the impact of digital system failures on operational and clinical services and identify appropriate continuity measures.
• Ability to problem solve and has attention to detail.

• Able to make a connection between their work and the benefit to patients and the public.

Planning and Organisational Skills

• Highly competent computing skills, including Microsoft Word, Excel and PowerPoint.
• Experience of leading complex work programmes involving multiple stakeholders and competing priorities.
• Highly motivated and able to plan and manage projects to deadlines.
• Able to influence and negotiate others to encourage collaborative working and achieve desired outcomes.
• Excellent organisational, programme, resource and time management skills.

Equality, Diversity and Inclusion

• An understanding of and commitment to equality of opportunity and good working relationships, both in terms of day to-day working practices, and in relation to management systems.
• Ability to treat all individuals with dignity and respect.

Other requirements specific to the role

• Ability to operate at Official Sensitive level.
• Ability to think ahead to anticipate, identify and address any risks or problems before they occur.
• Able to work for long periods at a desk using a computer workstation.
• Ability to travel between Trust sites and attend regional resilience meetings.

• Experience of working in an emergency situation.

Commitment to Trust Values and Behaviours

• Must be able to demonstrate behaviours consistent with the Trust's Values and Behaviours

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.

Certificate of Sponsorship

Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website.

From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants.

Employer details

Employer name

University Hospitals of Leicester NHS Trust

Address

LRI

Infirmary Square, Leicester,

Leicester

LE1 5WW

United Kingdom

Employer's website

https://www.jobsatleicestershospitals.nhs.uk/