ICT Cyber Security Specialist

Swydd-ddisgrifiad a phrif gyfrifoldebau manwl

The ICT Cyber Security Specialist is a key operational role within the Trust’s ICT Cyber Security Team, responsible for delivering defined elements of the Trust’s cyber security work programme and supporting the ongoing protection of systems, services and information assets. The post holder will work under the direction of the ICT Head of Cyber Security and will be expected to take ownership of assigned cyber security systems, activities and workstreams, ensuring they are operated, maintained and documented in line with Trust policies, national guidance and recognised good practice.

The role involves undertaking detailed technical and analytical activities to support the prevention, detection and management of cyber security threats. This includes analysing complex system and security information, correlating alerts and events, and supporting detailed investigations to determine root cause, impact and required remediation. The post holder will ensure investigations and outcomes are appropriately documented, communicated and escalated in line with agreed processes.

The post holder will lead and contribute to a range of assurance‑focused activities, including vulnerability assessments, cross‑site cyber security audits, risk assessments, business impact assessments and gap analysis. Findings will be used to inform proportionate recommendations, with the post holder working collaboratively with ICT service teams to agree mitigating actions and track progress to completion. This work supports the Trust’s ability to demonstrate effective cyber risk management and operational resilience.

A significant element of the role is supporting the Trust’s cyber governance and compliance obligations. The post holder will contribute to maintaining audit readiness and assurance evidence for national and NHS‑mandated frameworks, including the Data Security and Protection Toolkit, Cyber Essentials Plus and ISO 27001 controls. This includes maintaining supporting documentation, registers, logs, procedures and system‑level security artefacts, and supporting internal and external audits as required.

The role includes supporting the secure introduction and ongoing management of systems, services and suppliers by contributing to cyber security reviews and due diligence activity. This involves ensuring appropriate security documentation and controls are in place before access is granted, maintaining central records of third‑party and contractor access, and supporting regular review to ensure access remains appropriate, current and compliant. The post holder will also support the management and periodic review of privileged accounts.

The post holder will contribute to the development, review and continuous improvement of cyber security policies, procedures and incident response arrangements, ensuring they remain aligned with legislation, NHS guidance and emerging threats. The role includes providing specialist advice and guidance to colleagues across ICT, Information Governance, clinical and corporate services, supporting informed decision‑making and effective risk management.

The post holder will support staff awareness and training activity where required and contribute to the Trust’s wider cyber security engagement and communication approach. The role requires the ability to balance structured assurance activity with operational responsiveness, manage changing priorities and contribute to business continuity planning and exercises.

Occasional out‑of‑hours working may be required to support operational needs. The role may involve limited activity within clinical environments and requires adherence to Trust health, safety and infection control requirements.