Senior Cyber Security Analyst - Incident Management

Cyber Operations purpose is to support safe care and build public trust by building NHS England’s cyber resilience and enabling the wider health system to be cyber resilient, supporting Transformation Directorate’s purpose of delivering the best care and outcomes for the NHS.

The Cyber Operations Sub-directorate Consists Of 4 Operational Areas

• Cyber Security Operations Unit (CSOU) - SIO
• Cyber Delivery Unit (CDU).
• Cyber Improvement Programme.
• Chief Information Security Office Function (CISO)
  
  

The Senior Incident Manager role is a great opportunity to work within the CSOU leading on the management of serious and complex cyber security investigations.

You should have great communication skills and not be averse to public speaking and be able to communicate concepts and ideas across a range of stakeholders.

You will lead on process improvement work within the Incident Management team and act as a Cyber Security subject matter expert.

Flexibility is required as during an incident there may be extended hours of work.

You must be able to prepare reports to a standard that would withstand robust scrutiny.

An understanding of the computer misuse act and the data protection act is required.

You should be able to understand the cyber threat landscape.

You should understand the volatility of data, the importance of continuity of evidence and digital forensics.

• Manage Serious and Complex Cyber Security Investigations.
• Write and develop documentation such as playbooks and user guides.
• Write detailed investigation reports.
• Gather and manage large volumes of information from a variety of sources during an investigation.
• Support Incident Managers and Juniors Incident Managers with their investigations.
• Act as a second-tier escalation point for analysts within the CSOU.
• Manage and resolve more complex enquiries.
• Manage Cyber Incident Response teams that are deployed during a cyber security incident.
• Create strategies for digital forensics investigators.
• Run and chair blended calls during a Cyber Security Incident, ensuring they are structured and effective.
• Ensure standards by reviewing security tickets created by analysts and Incident Managers within the CSOU.
• Deliver cyber security and Incident Management presentations to a diverse audience.
• Write articles and share information that can help educate the wider systems on current and emerging cyber security threats.
• Gather key performance indicators and deliver reports.
• Use tooling such as Sentinel, Microsoft Defender for Endpoint and Splunk during cyber security investigations.
• Work across teams to develop and advance cyber security investigations by bringing together a variety of skills sets and knowledge to achieve successful outcomes.
• Act as a cyber security Subject Matter Expert for projects and improvements across the transformation directorate.
  
  

The NHS England Board Have Set Out The Top-level Purpose For The New Organisation To Lead The NHS In England To Deliver High-quality Services For All, Which Will Inform The Detailed Design Work And We Will Achieve This Purpose By

• Enabling local systems and providers to improve the health of their people and patients and reduce health inequalities.
• Making the NHS a great place to work, where our people can make a difference and achieve their potential.
• Working collaboratively to ensure our healthcare workforce has the right knowledge, skills, values and behaviours to deliver accessible, compassionate care
• Optimising the use of digital technology, research, and innovation
• Delivering value for money.
  
  

If you would like to know more or require further information, please visit https://www.england.nhs.uk/.

Colleagues with a contractual office base are expected to spend, on average, at least 40% of their time working in-person.

Staff recruited from outside the NHS will usually be appointed at the bottom of the pay band.

NHS England hold a Sponsor Licence; this means that we may be able to sponsor you providing the Home Office requirements are met. To be eligible for sponsorship through the Skilled Worker route you’ll usually need to be paid the ‘standard’ salary rate of at least £38,700 per year, or the ‘going rate’ for your job, whichever is higher. You can find more information on the Government website.

For further details / informal visits contact: Name: Martin Jarvis Job title: Security Lead Email address: [email protected]