ICT Cyber Security Manager (Band 8A)

Overview

In this role you will lead the Trust’s cyber security function, guiding risk-based cyber resilience across digital services. You will shape policies, governance and incident response while collaborating with Digital, clinical and supplier teams to meet NHS cyber standards. You’ll drive the cyber security strategy, assurance and improvement programmes to protect patient care and organisational continuity. This is a strategic, hands-on opportunity to influence security culture and resilience at scale.

Pay / Benefits

• development opportunities
• flexible working
• focus on wellbeing
• Disability Confident and equal opportunities employer
• collaborative culture
• supportive and inclusive organisation

Responsibilities

• Lead day-to-day cyber security capability and improvement across processes, technologies, controls and documentation
• Develop and maintain cyber security policies, standards and guidance aligned with NHS requirements
• Provide expert cyber security advice to senior stakeholders on risk, assurance and secure implementation
• Identify, assess and manage cyber security risks with governance escalation
• Provide assurance and reporting on cyber risk, incidents and compliance to senior groups
• Oversee vulnerability management, remediation planning and third-party collaboration
• Coordinate cyber security incident response, including on-call out-of-hours support
• Ensure monitoring, alerting and use of security tools (SIEM, endpoint protection, etc.) for detection and response
• Lead cyber assurance activities including DPIAs, DSPT/CAF reporting and external reviews
• Support cyber resilience, business continuity and disaster recovery planning and tabletop exercises
• Embed secure-by-design principles across projects and procurements
• Due diligence and security requirements for significant technical changes and third-party solutions
• Collaborate with Information Governance, data protection and procurement for risk-based assurance
• Produce reports and dashboards on cyber risk and performance for leadership teams
• Manage and develop cyber security staff and programmes
• Contribute to cyber business cases, investment proposals and technical specs
• Shape and implement the Trust’s cyber security strategy and roadmap
• Build relationships with NHS England, auditors, suppliers and partners for cyber resilience
• Promote cyber awareness and security culture across the Trust
• Stay current with threats, standards and NHS guidance and translate into practical actions with the Trust

Key requirements

• Degree level qualification in information technology, cyber security, computer science or related discipline, or equivalent senior cyber security experience
• Relevant specialist cyber security qualifications/certifications (CISSP, CISM, CCSP, ISO 27001, Security+, GIAC or equivalent)
• Continued professional development in cyber security or related fields
• Significant experience in cyber security within a large, complex organisation
• Experience leading cyber security operations, improvement programmes and assurance activity
• Experience managing cyber security incidents and risk-based investigations
• Experience in cyber risk assessment, security control reviews, audits and producing assurance evidence
• Experience working with senior stakeholders and communicating technical risk to non-technical audiences
• Experience with supplier management, contracted security services and third-party partners
• Desirable leadership/management qualification and NHS/public sector experience
• Rehabilitation of Offenders check as part of DBS process

• Stakeholder engagement and influencing at senior levels
• Clear, practical communication of complex risks
• Leadership and people management
• Cyber risk assessment and governance
• Vulnerability management and remediation
• Incident response and recovery planning

…