Head of Cyber Security – CSOC Innovation & Improvements

Overview

In this role you will lead Cyber Security Operations Centre (CSOC) innovation and improvement initiatives to strengthen the NHS’s cyber resilience. You will manage cross-team efforts across Engineering, Security Ops and Threat Ops to deliver innovative security solutions and robust processes. You will help coordinate large-scale incidents, oversee disaster recovery and lessons learned activities, and represent CSOC in governance forums. This is an opportunity to shape security capabilities across the health system, driving resilient care and public trust.

Pay / Benefits

• Recruitment and Retention Premium (RRP) 30% per annum
• Permanent contract
• Flexible working
• Potential career development within NHS England

Responsibilities

• Lead cross-team initiatives within CSOC (Engineering, Security Ops, Threat Ops)
• Line manage the Innovation and Improvement team
• Coordinate complex incidents and investigations across the NHS during large-scale events
• Identify and drive CSOC improvement activities to enhance service delivery
• Provide specialist expertise in Threat Operations, Protective Monitoring, Security Engineering and Incident Management
• Stay current with security and tech trends; research and evaluate emerging threats and mitigations
• Utilize advanced analytic tools to analyze threat patterns and vulnerabilities
• Present findings to senior leaders
• Maintain Disaster Recovery and Business Continuity plans and coordinate activation when needed
• Manage Lessons Learned processes and post-incident activities
• Represent CSOC in organisational Risk Governance meetings
• Act as SME for external improvement programmes
• Develop and maintain stakeholder relationships across health sector, X-Gov and suppliers

Key requirements

• Extensive knowledge of ISOC modules, processes and technologies; ability to execute cyber security initiatives
• Strong appreciation of innovation value and ability to develop new ideas to improve performance
• Detailed knowledge of SIEM concepts, procedures and usage to protect networks
• Experience providing technical or business guidance to clients (internal/external) across diverse situations
• Knowledge of forensics techniques, methods and tools for IT security investigations
• Masters level degree in Cyber Security or equivalent experience
• Security Clearance requirements including National Security Vetting; residency rules apply

• leadership and people management
• stakeholder relationship skills
• face-to-face and written communication with senior leaders
• Information Security Operation Centre (ISOC) modules and technologies
• Security Information and Event Management (SIEM)
• Threat Operations and Protective Monitoring

…