Health & Care System Cyber Security Compliance Lead - Joint Cyber Unit

Detailed job description and main responsibilities

As a Health and Care System Cyber Security Compliance Lead within the Joint Cyber Unit,  the post holder will work as part of a dynamic team in delivering an effective service supporting cyber security risk reduction across the health and care system.

 The post holder will lead the provision of an efficient, effective, and high quality professional and well-coordinated system wide Health and Care cyber security compliance service capable of meeting all statutory, regulatory and NHS requirements ensuring alignment with the activity of the organisation.

The post holder will be responsible for:

• Provide team leadership and subject matter expertise in security compliance.
• Oversee team workload and capacity, collaborating with other leaders to align resources and priorities.
• Lead the delivery of a responsive, high quality cyber security compliance service. 
• Drive remediation of cross-cutting security issues through the design and continuous delivery of security improvement plans.
• Partner with regional stakeholders to strengthen cyber maturity and organisational resilience.
• Coordinate cyber security compliance activities across a diverse stakeholder base to drive meaningful security improvement and maintain clear lines of communication. 
• Scope and assess the security posture of Health and Care Organisations taking an evidence based approach
• Develop and manage security compliance metrics to inform evidence based decision making
• Lead compliance activities aligned with key frameworks and legislation such as: NCSC CAF, NIS Regulations, and the DSPT.
• Providing cyber security expertise supporting the development, implementation, and monitoring of the compliance service.
• Providing comprehensive compliance plans and progress reports to the relevant Boards as per the agreed reporting schedule and on an ad hoc basis as required
• Working closely with other leads and sponsor directors to ensure interdependencies across all compliance areas are considered and actions aligned
• Managing the day-to-day activities of the compliance service as well as contribute specialist knowledge to develop effective strategy and operational policies
• Engaging with key strategic regional and national policy makers to inform development of strategy and policies
• Identifying examples of national and international best practice and to ensure that benefits from relevant innovations in healthcare are realised
• Developing and champion new initiatives or projects as necessary
• Ensuring that the team members work cohesively within the team and with other programmes.
•  Providing leadership, direction, and support to ensure a consistent approach through programme management to delivering organisational objectives.

The post of Health and Care System Cyber Compliance Lead has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 30% per annum.

Please be aware that RRP is non-contractual and subject to review.

Please note that the reason for the fixed term of this contract is covering vacancy.

National Security Vetting

Important: Please be aware there are residency requirements you need to meet:

All NHS England Cyber Security personnel must hold SC level as a minimum.

To meet National Security Vetting requirements, SC clearances require 5 years continuous UK residency. In certain cases, this can be reduced to three years continuous UK residency, with additional overseas checks for the previous two years.’

Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered.

Please make sure you meet these requirements before applying for this role. You don’t need to have SC already, however, failure to achieve the requirements for SC after offer, will result in the job offer being withdrawn.

For further advice please check https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels/national-security-vetting-clearance-levels#security-check-sc.

For further information on National Security Vetting please check National security vetting: clearance levels - GOV.UK, information on the Security Vetting and Clearances Intranet page or contact [email protected].

You can find further details about the role, including key responsibilities and accountabilities, alongside the organisational structure and person specification in the attached Job Description and other supporting documents.

Secondments

Applicants from within the NHS will be offered on a secondment basis only, agreement should be obtained from their employer prior to submitting the application.

Role Title

The job title advertised is for the purposes of advertising, the successful candidate(s) will be hired with the job title of Cyber Operations and Engagement Lead until a formal change can be made.