Digital Health and Care Wales

Senior Security Specialist/ Security Specialist

Information:

This job is now closed

Job summary

This post is fixed term/secondment for up to 12 months.

If you are interested in applying for the secondment position, you must obtain permission from your current line manager prior to applying for this post.

The Cyber Security team are looking to recruit a Senior IT Specialist to work with all stakeholders, providing a high degree of support to operational services and compliance activity, with skills as described in the job description.What we are looking for?We are seeking candidates with the commitment, experience, skills and knowledge to provide the necessary level of cyber security involvement for services across NHS Wales. Candidates must be capable of managing the robust and consistent design and assurance required to support the delivery of any associated new digital services. Experienced in managing the delivery and provision of cyber security services within a large and complex organisation, you will have excellent planning and organization skills, coupled with practical knowledge of risk management methodology. An exceptional communicator, you shall be expected to establish working relationships with staff at all levels within Digital Health and Care Wales, including clinicians and the wider user community.

If we find the right candidate, who is lacking some experience, we can offer an IT Specialist role as a development opportunity (Band 5)

Main duties of the job

As a Senior IT Specialist, you will take responsibility for monitoring, analysing and verifying alerts from critical networked devices across NHS Wales.

You will work autonomously and as part of the Cyber Security Operations Centre (SOC) team within DHCW. You will be responsible for validating and dealing with any alerts passed to you from the Systems, Health Boards or members of the team, and in turn escalating them upwards to the Operational Security Lead.

You will be expected to work with a range of stakeholders across other operational teams across Wales; project managers and service management.

This post is fixed term until 31/03/2025 to meet the needs of the service.

The ability to speak Welsh is desirable for this post; Welsh and/or English speakers are equally welcome to apply.

.

About us

Digital Health and Care Wales (DHCW) is part of the NHS Wales family and has an important role in changing the way health and care services are delivered through technology and data. The organisation supports frontline staff with modern systems and access to important information about their patients, while empowering the people of Wales to manage their own health through digital NHS Wales services.

Working for DHCW offers lots of employee benefits, including flexible working, a competitive salary, 28 days of annual leave plus Bank Holidays and opportunities for career development. We are committed to recognising and celebrating our staff as the most valuable part of our organisation.

Join our game changing, life-saving team and start making a real difference to health and care services in Wales.

Details

Date posted

26 March 2024

Pay scheme

Agenda for change

Band

Band 5

Salary

£28,834 to £43,257 a year per annum

Contract

Fixed term

Duration

12 months

Working pattern

Full-time

Reference number

025-AC052-0324

Job locations

Hybrid working

Location to be confirmed at interview

CF11 9AD


Job description

Job responsibilities

You will be able to find a full Job description and Person Specification attached within the supporting documents or please click Apply now to view in Trac

We are looking for candidates who can demonstrate proven experience and strong skills in the following areas:-

  • An understanding of malicious attack processes along with the ability to verify services for vulnerabilities that might allow those attack to be achieved
  • A good understanding of network protocols and traffic Cisco, Checkpoint
  • Experience in managing or maintaining multi-vendor IT services (Microsoft, Cisco, ZScaler etc) in a corporate environment
  • Knowledge of, or experience using Security Information and Event Management systems (SIEM) or central log management system
  • Good verbal and written communications skills and must understand when to escalate concerns to line manager
  • The ability to work to very tight deadlines and work proactively under pressure
  • Deliver projects and work packages against individual and team Key Performance Indicators

Why join us?You want the opportunity to work on a continuous stream of new challenges.You are committed to improving the level of cyber security for users of NHS systems in Wales and wish to ensure that the services we develop are first-class and able to deliver better care to those who need it.You can define the level of risk presented to the business, and then develop solutions to mitigate it.You are committed to continual improvement and education in the field of cyber security.

Job description

Job responsibilities

You will be able to find a full Job description and Person Specification attached within the supporting documents or please click Apply now to view in Trac

We are looking for candidates who can demonstrate proven experience and strong skills in the following areas:-

  • An understanding of malicious attack processes along with the ability to verify services for vulnerabilities that might allow those attack to be achieved
  • A good understanding of network protocols and traffic Cisco, Checkpoint
  • Experience in managing or maintaining multi-vendor IT services (Microsoft, Cisco, ZScaler etc) in a corporate environment
  • Knowledge of, or experience using Security Information and Event Management systems (SIEM) or central log management system
  • Good verbal and written communications skills and must understand when to escalate concerns to line manager
  • The ability to work to very tight deadlines and work proactively under pressure
  • Deliver projects and work packages against individual and team Key Performance Indicators

Why join us?You want the opportunity to work on a continuous stream of new challenges.You are committed to improving the level of cyber security for users of NHS systems in Wales and wish to ensure that the services we develop are first-class and able to deliver better care to those who need it.You can define the level of risk presented to the business, and then develop solutions to mitigate it.You are committed to continual improvement and education in the field of cyber security.

Person Specification

Qualifications

Essential

  • Educated to degree level (preferably ICT or Cyber Security) or equivalent experience
  • Evidence of relevant further higher level professional development.

Desirable

  • Professional Cyber Security qualification or equivalent experience
  • ITIL practitioner or equivalent qualification or experience.

Experience

Essential

  • Relevant experience working in IT/Cyber Security
  • A good Technical understanding of application and network security.
  • Working with SIEM solutions
  • Experience in providing relevant technical / security support at appropriate level

Desirable

  • Experience with ICT service provision in a health care setting
  • SOP/Procedure writing

Ability

Essential

  • Ability to provide guidance and support to less experienced team members.
  • Ability to communicate clearly with non-technical staff and end users.
  • Ability to challenge poor behaviour

Desirable

  • Welsh Language Skills are desirable levels 1 to 5 in understanding, speaking, reading, and writing in Welsh
Person Specification

Qualifications

Essential

  • Educated to degree level (preferably ICT or Cyber Security) or equivalent experience
  • Evidence of relevant further higher level professional development.

Desirable

  • Professional Cyber Security qualification or equivalent experience
  • ITIL practitioner or equivalent qualification or experience.

Experience

Essential

  • Relevant experience working in IT/Cyber Security
  • A good Technical understanding of application and network security.
  • Working with SIEM solutions
  • Experience in providing relevant technical / security support at appropriate level

Desirable

  • Experience with ICT service provision in a health care setting
  • SOP/Procedure writing

Ability

Essential

  • Ability to provide guidance and support to less experienced team members.
  • Ability to communicate clearly with non-technical staff and end users.
  • Ability to challenge poor behaviour

Desirable

  • Welsh Language Skills are desirable levels 1 to 5 in understanding, speaking, reading, and writing in Welsh

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.

Certificate of Sponsorship

Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).

From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).

Additional information

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.

Certificate of Sponsorship

Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).

From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).

Employer details

Employer name

Digital Health and Care Wales

Address

Hybrid working

Location to be confirmed at interview

CF11 9AD


Employer's website

https://nwis.nhs.wales/ (Opens in a new tab)

Employer details

Employer name

Digital Health and Care Wales

Address

Hybrid working

Location to be confirmed at interview

CF11 9AD


Employer's website

https://nwis.nhs.wales/ (Opens in a new tab)

Employer contact details

For questions about the job, contact:

Head of Cyber Security

Julian Jones

julian.jones@wales.nhs.uk

Details

Date posted

26 March 2024

Pay scheme

Agenda for change

Band

Band 5

Salary

£28,834 to £43,257 a year per annum

Contract

Fixed term

Duration

12 months

Working pattern

Full-time

Reference number

025-AC052-0324

Job locations

Hybrid working

Location to be confirmed at interview

CF11 9AD


Supporting documents

Privacy notice

Digital Health and Care Wales's privacy notice (opens in a new tab)