IT Cyber Security Systems Technician

Job responsibilities

1. To be responsible for ensuring Trust computer assets are kept up-to-date and free from known vulnerabilities. This includes responsibility for the Trust IT patch management solution and the updating of 7000+ computer assets. Due to the critical nature of NHS service delivery a major part of this role will be to perform robust testing of software and hardware updates; working closely with the Test Manager and Information Asset Owners to ensure critical systems are tested against updates prior to general release. To monitor Trust wide patch update deployments and take remedial actions where necessary. To produce reports for Trust Senior Management including the Senior Information Risk Officer (SIRO) evidencing compliance for security updates across its networks and devices. To be the subject matter expert for the IT patch management solution and reconfiguring patch configuration/process in accordance with business needs.

2. To be responsible for the management of the NHS Digital Advanced Threat Protection (ATP) security system. To analyse complex IT cyber security threats, interpreting data to recommend appropriate courses of action for remediation, mitigation, risk transference and/or acceptance. To ensure the ATP incident and alert system is updated with agreed risk action plans within expected timescales. To ensure all computer devices are communicating with ATP as expected; to perform fault resolution as required. The management of this and other security systems will result in regular interruptions to your daily workload as security incidents are of an unpredictable nature and will require in many cases immediate attention.

3. To provide advanced technical support for Trust antivirus/malicious code prevention systems. To provide incident response management as stated in the IT Security Policy to contain virus or malicious code outbreaks. To provide day to day monitoring of the Trusts malware protection systems and ensure all Trust devices have active up-to-date anti-virus software. To produce statistics and reports to senior management evidencing performance in managing malicious threats to Trust networks and assets. To perform system hardware and/or software upgrades as and where required.

4. To be responsible for the Trusts mobile device management system. To configure the mobile device management system balancing the needs of the business and in accordance with IT Security Policy. As the subject matter expert you will to direct the IT Cyber Security Technician in the administration of this system, ensuring all devices are up-to-date with the latest security configurations and operating system/app updates. To design new client configurations as new technologies are incorporated into themobile management system. To perform system hardware and/or software upgrades as and where required.

5. To support the Senior IT Cyber Security Technician in the management of the Trusts web filtering solution. To update system configurations to resolve user/service based Internet access requests. To ensure the regular backups of web filtering solution configurations and perform system restores to ensure business continuity as required. To perform system hardware and/or software upgrades as and where required.

6. To support the Trusts encryption solutions on both servers and client devices. To provide day to day monitoring of the Trusts encryption systems. To provide monitoring and reports to Trust senior management via the Information Governance Action Group on the transfer of data to removable media across Trust devices. To perform system hardware and/or software upgrades as and where required.

7. The IT Cyber Security Team manages the installation and upgrade of Trust high value security tools/hardware and you will be expected to direct and/or partake in these system upgrades/installations. You are required to have the highest ethical standards when managing these systems due to their value and importance to the effective security of Trust networks.

8. To provide, receive and analyse highly complex security vulnerability assessments. To analyse, understand and be able to interpret complex security threats to IAOs in a language they clearly understand; providing recommendations for remedial actions and ensuring IAOs complete these within agreed timescales. To produce executive summary reports for the Trust SIRO of these complex security issues against recognised standards such as the Open Web Application Security Project (OWASP) and as determined by the Data Security and Protection Toolkit (DSPT).

9. To support the IT Cyber Security Manager in assessing systems for security threats or auditing compliance with Trust IT Security Policy. To work with third party security consultants and IAOs in the security assessment or audit of new or existing Trust systems.

10. To be responsible for performing regular password audits of all user accounts, liaising with users who require assistance to meet good password standards. Taking action where standards are repeatedly notmet. Producing training and advice material to enable end users to understand the required process and reasons for compliance.

11. To provide NHS authorities and senior IT managers with risk information relevant to mandatory cyber security monitoring of NHS information systems identifying potential risks. Daily analysis and recording of associated IT security system alerts including but not limited to enterprise firewalls and malware.

12. To receive, analyse and recommend action plans for NHS Digital CareCERT cyber-security alerts directly affecting Trust hardware and/or software. To recommend and agree remedial actions with senior IT Cyber Security staff and monitor the progress of cyber-security remediation actions. To liaise with relevant IAOs and provide expert IT security advice to ensure the successful completion of recommended actions. To escalate where these actions are not being achieved.

13. To support the IT Cyber Security Manager in IT Security policy creation, update and implementation. To review IT Security policy and suggest amendments to processes in order to meet new or changingbusiness needs. To provide advice to Trust users at all levels on Trust IT security policy and technical solutions. To provide resolution for IT security related incidents and service requests and maintain/update the IT Cyber Security Team 3rd line job allocation management system.

14. To be part of a IT cyber security incidence response team and manage and support the investigation of IT security related incidents which may include highly sensitive matters that require strict confidentiality.This may also include exposure to content that is of an offensive or graphic nature.

15. To create IT cyber security user guidance documents and maintain the Teams intranet presence.

16. Day-to-day supervision of the IT Cyber Security Technician.

17. To ensure in conjunction with the Senior Cyber Security Technician that there is adequate office cover for the management of IT security technical systems.

18. To manage and maintain the Teams test bed of IT hardware and software.

19. To provide training to Trust users on IT security related technologies as directed.

20. To attend meetings where technical IT security requires representation including the Information Governance Action Group, Change Management and Desktop Management meetings.

21. To attend relevant training when required.

Any other duties commensurate with the grading of this pos

Education

Essential

• Good standard of education [Math, English]

Desirable

• Working towards or certified as SSCP or equivalent
• IT qualifications relevant to the post e.g., ITIL, cyber security

Experience/Skills

Essential

• Experience of working within an ICT support environment preferably within technical IT Security
• Experience of resolving complex technical IT security related faults/risks.
• To demonstrate a good understanding of risk management and be able to competently report identified IT risk events.
• Excellent analytical skills requiring significant concentration ability in relation to analysis of considerable sized in-depth IT system security/activity logs in order to identify IT security risk.
• Experience of supporting IT security systems on various operating systems such as web filtering, anti-virus, encryption, mobile device management, advanced threat protection, patch management.
• Knowledge of malware such as virus, Trojan or ransomware behaviour and remedial actions, containment strategies.
• Ability to operate effectively in a pressurised, quick changing environment and prioritise workloads to meet targets.
• To understand the relevant Trust IT Security and Information Governance policies in order to ensure technical compliance of systems and solutions with these Policies. Ability to provide IT security advice to users for technical IT security solutions and Trust IT Security policy.
• Experience of using Excel desirably to an advanced level.

Desirable

• Experience of providing technical risk analysis of potential or actual IT security threats including the provision of threat analysis and recommendations for remediation, mitigation, transference and/or risk acceptance.
• Experience of configuring and using security vulnerability assessment tools and /or report analysis in a language understood by the target audience.
• Experience of analysing information systems ideally in relation to new/existing systems including changes and/or fault identification identifying potential risk(s).
• Experience of writing scripts and SQL queries is desirable.

Communication Skills

Essential

• Excellent telephone manner - good customer contact skills.
• Good communication skills both written and oral especially in provision of reports to senior management.
• Must be able to work as part of a team.
• Ability to work unsupervised on pre-defined tasks.
• Able to communicate highly technical information to varying levels of user, using non-technical language in a manner that promotes confidence.

Desirable

• Ability to produce training materials and deliver IT security related training to users either one-to-one or as a group.

Flexibility

Essential

• To be part of an on-call rota providing out of hours support for cyber related incidents including attendance at any Trust location within 30 minutes.
• The post holder will normally be expected to work flexibly between the hours of 7am to 6pm. Hours of work within this daily time period will be agreed in advance with the IT Cyber Security Manager to enable business processes to be completed as required.
• In the absence of the Senior IT Cyber Security Technician the post holder will be expected to provide office cover for the management of technical IT security systems.

Other

Essential

• Ability to work in a busy / fast moving IT environment.
• A good understanding of health and safety.
• A good understanding of manual handling.
• A high level of confidentiality is required of the post holder when assisting with breaches of security and confidentiality.
• Advanced computer skills including keyboard together with extensive use of a VDU.

Desirable

• Due to nature of cyber security incidents, you will be required to change activity quickly.
• May be required to carry IT equipment for IT cyber security related systems/tasks.

Certificate of Sponsorship

Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).

From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).