Job summary
A unique opportunity has arisen for an IT Security Manager to be part of an existing and expanding Cyber Security Team. You will be joining a friendly and supportive IT Department and you will be committed to follow technical solutions through to their successful conclusion and to maintain a positive attitude towards delivering IT best practices.
We are seeking a highly skilled and experienced IT Security Manager to play a vital role in ensuring the security and integrity of our IT systems and data.
This is great opportunity to help shape our every evolving team and service, developing and implementing security policies and procedures, and supporting the day-to-day operations. The successful candidate will be responsible for developing good practice and processes around cyber and play an important role in the detection and prevention of threats on our network.
If you have a passion for cyber security and a desire to be part of an exciting new opportunity, then we want to hear from you.
Main duties of the job
You will be part of a team responsible for operational cyber security across the Trust, providing proactive threat monitoring and our response to cyber related incidents and alerts
You will help lead on vulnerability analysis and management across the Trust, supporting technical teams with remediation, and developing processes and good practice to continually improve the security posture throughout the system
Providing Cyber Security risk analysis of all Trust-owned Information Assets, and practical risk management options
Providing practical, professional and technical advice to the wider Trust, Cyber Security Team and IT Department regarding security and risk analysis/ management
Undertaking projects as agreed with line managers to achieve and improve compliance with Cyber Security standards
Working within and provide advice on suitable and relevant Cyber Security policies and procedures.
About us
We are recognised as one of the leading NHS Foundation Trusts in the UK. Our vision is to Build Healthier Lives, and we recognise that we need incredible staff to do this.
Our commitment to our staff is to create the best place for them to work, and we are dedicated to:
Investing in the health and wellbeing of our staff, including a commitment of offering flexible working where we can;Offer our staff a wide variety of training and development opportunities, to support their personal and career development objectives.
UHB is committed to ensuring that our staff are treated fairly and feel that they belong, by creating a kind and inclusive environment. This is about equity of opportunity; removing all barriers, including discrimination and ensuring each individual member of staff reach their true potential, achieve their ambitions and thrive in their work. This is more than words. We are taking action. Our commitment to an inclusive culture is embedded at all levels of the organisation where every voice is heard, driven by our diverse and active staff networks, and at Board level by the Fairness Taskforce led by our CEO. We nurture a culture which empowers staff to challenge discriminatory behaviours and to enable people to bring their 'whole self' to a kinder, more connected and bold place to work.
Job description
Job responsibilities
*Please Note : For a detailed job description for this vacancy, please see attached Job Description*
Job description
Job responsibilities
*Please Note : For a detailed job description for this vacancy, please see attached Job Description*
Person Specification
Qualifications
Essential
- *Educated to Degree standard or equivalent in an IT related subject or with equivalent experience learning in the field of ICT technical design and development.
- *Certified Information Systems Security Professional (CISSP) qualification or equivalent experience
Desirable
Experience
Essential
- *Administration and Configuration of Security incident monitoring tools (IDS/IPS/SEIM)
- *3rd party supplier management
- *Incident response management
- *Process improvement methods
- *Vulnerability assessment techniques
- *Risk management techniques
- *Technical knowledge of application and network security
- *Systems and network technical infrastructure
- *A range of Information security standards and associated controls
- *System development life-cycle
- *Up to date knowledge of cyber threats and vulnerabilities and sources of information
Desirable
- *Director level presentation
- *Cryptographic controls
- *Cloud technologies
- *Legal requirements
- *Web application architecture
- *Desktop system architecture
Additional Criteria
Essential
- *Root cause analysis
- *Critical thinking
- *Task planning
- *Communicator
- *Report writing
- *Is articulate
- *Can share knowledge
- *Is precise
- *Has integrity
- *Can show innovation
- *Is confidential
- *Can collaborate
- *Occasional out of hours working, due to the nature of the role
Person Specification
Qualifications
Essential
- *Educated to Degree standard or equivalent in an IT related subject or with equivalent experience learning in the field of ICT technical design and development.
- *Certified Information Systems Security Professional (CISSP) qualification or equivalent experience
Desirable
Experience
Essential
- *Administration and Configuration of Security incident monitoring tools (IDS/IPS/SEIM)
- *3rd party supplier management
- *Incident response management
- *Process improvement methods
- *Vulnerability assessment techniques
- *Risk management techniques
- *Technical knowledge of application and network security
- *Systems and network technical infrastructure
- *A range of Information security standards and associated controls
- *System development life-cycle
- *Up to date knowledge of cyber threats and vulnerabilities and sources of information
Desirable
- *Director level presentation
- *Cryptographic controls
- *Cloud technologies
- *Legal requirements
- *Web application architecture
- *Desktop system architecture
Additional Criteria
Essential
- *Root cause analysis
- *Critical thinking
- *Task planning
- *Communicator
- *Report writing
- *Is articulate
- *Can share knowledge
- *Is precise
- *Has integrity
- *Can show innovation
- *Is confidential
- *Can collaborate
- *Occasional out of hours working, due to the nature of the role
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).
From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).
Additional information
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).
From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).
