Job summary
This post is fixed term/secondment for up to 12 months.
If you are interested in applying for the secondment position, you must obtain permission from your current line manager prior to applying for this post.
The Cyber Security team are looking to recruit a Senior IT Specialist to work with all stakeholders, providing a high degree of support to operational services and compliance activity, with skills as described in the job description.What we are looking for?We are seeking candidates with the commitment, experience, skills and knowledge to provide the necessary level of cyber security involvement for services across NHS Wales. Candidates must be capable of managing the robust and consistent design and assurance required to support the delivery of any associated new digital services. Experienced in managing the delivery and provision of cyber security services within a large and complex organisation, you will have excellent planning and organization skills, coupled with practical knowledge of risk management methodology. An exceptional communicator, you shall be expected to establish working relationships with staff at all levels within Digital Health and Care Wales, including clinicians and the wider user community.
If we find the right candidate, who is lacking some experience, we can offer an IT Specialist role as a development opportunity (Band 5)
Main duties of the job
As a Senior IT Specialist, you will take responsibility for monitoring, analysing and verifying alerts from critical networked devices across NHS Wales.
You will work autonomously and as part of the Cyber Security Operations Centre (SOC) team within DHCW. You will be responsible for validating and dealing with any alerts passed to you from the Systems, Health Boards or members of the team, and in turn escalating them upwards to the Operational Security Lead.
You will be expected to work with a range of stakeholders across other operational teams across Wales; project managers and service management.
This post is fixed term until 31/03/2025 to meet the needs of the service.
The ability to speak Welsh is desirable for this post; Welsh and/or English speakers are equally welcome to apply.
.
About us
Digital Health and Care Wales (DHCW) is part of the NHS Wales family and has an important role in changing the way health and care services are delivered through technology and data. The organisation supports frontline staff with modern systems and access to important information about their patients, while empowering the people of Wales to manage their own health through digital NHS Wales services.
Working for DHCW offers lots of employee benefits, including flexible working, a competitive salary, 28 days of annual leave plus Bank Holidays and opportunities for career development. We are committed to recognising and celebrating our staff as the most valuable part of our organisation.
Join our game changing, life-saving team and start making a real difference to health and care services in Wales.
Job description
Job responsibilities
You will be able to find a full Job description and Person Specification attached within the supporting documents or please click Apply now to view in Trac
We are looking for candidates who can demonstrate proven experience and strong skills in the following areas:-
- An understanding of malicious attack processes along with the ability to verify services for vulnerabilities that might allow those attack to be achieved
- A good understanding of network protocols and traffic Cisco, Checkpoint
- Experience in managing or maintaining multi-vendor IT services (Microsoft, Cisco, ZScaler etc) in a corporate environment
- Knowledge of, or experience using Security Information and Event Management systems (SIEM) or central log management system
- Good verbal and written communications skills and must understand when to escalate concerns to line manager
- The ability to work to very tight deadlines and work proactively under pressure
- Deliver projects and work packages against individual and team Key Performance Indicators
Why join us?You want the opportunity to work on a continuous stream of new challenges.You are committed to improving the level of cyber security for users of NHS systems in Wales and wish to ensure that the services we develop are first-class and able to deliver better care to those who need it.You can define the level of risk presented to the business, and then develop solutions to mitigate it.You are committed to continual improvement and education in the field of cyber security.
Job description
Job responsibilities
You will be able to find a full Job description and Person Specification attached within the supporting documents or please click Apply now to view in Trac
We are looking for candidates who can demonstrate proven experience and strong skills in the following areas:-
- An understanding of malicious attack processes along with the ability to verify services for vulnerabilities that might allow those attack to be achieved
- A good understanding of network protocols and traffic Cisco, Checkpoint
- Experience in managing or maintaining multi-vendor IT services (Microsoft, Cisco, ZScaler etc) in a corporate environment
- Knowledge of, or experience using Security Information and Event Management systems (SIEM) or central log management system
- Good verbal and written communications skills and must understand when to escalate concerns to line manager
- The ability to work to very tight deadlines and work proactively under pressure
- Deliver projects and work packages against individual and team Key Performance Indicators
Why join us?You want the opportunity to work on a continuous stream of new challenges.You are committed to improving the level of cyber security for users of NHS systems in Wales and wish to ensure that the services we develop are first-class and able to deliver better care to those who need it.You can define the level of risk presented to the business, and then develop solutions to mitigate it.You are committed to continual improvement and education in the field of cyber security.
Person Specification
Qualifications
Essential
- Educated to degree level (preferably ICT or Cyber Security) or equivalent experience
- Evidence of relevant further higher level professional development.
Desirable
- Professional Cyber Security qualification or equivalent experience
- ITIL practitioner or equivalent qualification or experience.
Experience
Essential
- Relevant experience working in IT/Cyber Security
- A good Technical understanding of application and network security.
- Working with SIEM solutions
- Experience in providing relevant technical / security support at appropriate level
Desirable
- Experience with ICT service provision in a health care setting
- SOP/Procedure writing
Ability
Essential
- Ability to provide guidance and support to less experienced team members.
- Ability to communicate clearly with non-technical staff and end users.
- Ability to challenge poor behaviour
Desirable
- Welsh Language Skills are desirable levels 1 to 5 in understanding, speaking, reading, and writing in Welsh
Person Specification
Qualifications
Essential
- Educated to degree level (preferably ICT or Cyber Security) or equivalent experience
- Evidence of relevant further higher level professional development.
Desirable
- Professional Cyber Security qualification or equivalent experience
- ITIL practitioner or equivalent qualification or experience.
Experience
Essential
- Relevant experience working in IT/Cyber Security
- A good Technical understanding of application and network security.
- Working with SIEM solutions
- Experience in providing relevant technical / security support at appropriate level
Desirable
- Experience with ICT service provision in a health care setting
- SOP/Procedure writing
Ability
Essential
- Ability to provide guidance and support to less experienced team members.
- Ability to communicate clearly with non-technical staff and end users.
- Ability to challenge poor behaviour
Desirable
- Welsh Language Skills are desirable levels 1 to 5 in understanding, speaking, reading, and writing in Welsh
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).
From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).
Additional information
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).
From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).