Job summary
The Cyber Support Lead role sits within the NCL ICT Service and will be responsible for defining and delivering the organisations Cyber Security roadmap and strategy. This role will be the subject matter expert for all areas of Cyber Security covering the NCL Azure, Cloud and on-premise environments including end user device security for the entire Estate.
As an expert in this field, with strong experience in leading a cyber security function, the role is responsible for providing information security support to NCL ICB and its customers in alignment with ICB policies and standards. The post holder will work closely in collaboration with the ICT and IG teams in the development of robust operational procedures which strengthen the ICB's cyber security posture. In order to share knowledge, best practice and also details of shared threats, the post holder will also be expected to form strong relationships with their counterparts across the London Region and Trust Leads within the ICS, as well as working closely with National Leads.
Main duties of the job
They will develop and embed a culture of high-quality information security management, including providing advice and guidance on the implementation of corporate policies, where appropriate to staff.
They will lead on the annual Cyber Essentials Plus audit and the Cyber Security elements of the Data Security Toolkit, to ensure all processes such as patching and audit controls are being followed in order that NCL remain compliant and are achieving exceptional standards, reporting any risks or gaps together with mitigations to the Assistant Director of IT and Head of Technical Services.
When required the post holder will be expected to conduct research into industry best practices, services and solutions, write detailed technical specifications and create evaluation criteria, before evaluating proposals and solutions.
About us
NHS North Central London Integrated Care Board (NCL ICB) is a statutory body responsible for planning and allocating health and care resources to improve the lives of people in our five boroughs: Barnet, Camden, Enfield, Haringey, and Islington.
Our local population is large and diverse, with a wide range of health and care needs that are evolving all the time. We're committed to improving the health and experience of our patients and residents, working with partners across the North Central London Integrated Care System (ICS) - including Councils, providers, GPs and voluntary and community organisations - to plan and deliver high quality, joined-up and accessible health and care services that put people first.
As an ICB, we're focused on:
- improving outcomes in population health and healthcare
- tackling inequalities in outcomes, experience, and access
- enhancing productivity and value for money
- helping the NHS support broader social and economic development.
We're ambitious, driven, and passionate about working collaboratively and creatively to deliver the best health and care possible for our patients and residents through every stage of their lives. Our Population Health and Integration Strategy outlines our vision and priorities and will shape our focus as a system for the coming years.
Job description
Job responsibilities
The post holder is required demonstrate a high level of technical understanding, with reference to cloud technologies, and an in-depth knowledge of ICT Governance process, procedures, compliance and industry best practice; to include but not limited to ITIL and COBIT, and design authority, change management and release management.
Please note that priority will be given to NCL ICB employees who are affected by change.
For further information or an informal discussion about the role, please contact: [Asim Khan] [Head of Technical Service], asim.khan3@nhs.net
Job description
Job responsibilities
The post holder is required demonstrate a high level of technical understanding, with reference to cloud technologies, and an in-depth knowledge of ICT Governance process, procedures, compliance and industry best practice; to include but not limited to ITIL and COBIT, and design authority, change management and release management.
Please note that priority will be given to NCL ICB employees who are affected by change.
For further information or an informal discussion about the role, please contact: [Asim Khan] [Head of Technical Service], asim.khan3@nhs.net
Person Specification
Education/Qualifications
Essential
- Educated to master's degree or equivalent level of experience working at a similar level in the specialist area.
- Evidence of continuing professional development and managerial development
- Cyber Security Qualification, such as CISSP, CISM,CISA
- Significant and evidenced experience in leading Security Operations
- Significant Experience in providing senior level cyber support through a team of technical experts.
- Complex Configuration, administration, planning, design, implementation, and management of security services
Experience
Essential
- An in depth understanding of a range of security authentication and encryption methods.
- Significant experience ensuring all services are in accordance with legislation and good practice.
- Understanding and experience of working in a full-service ICT operation.
- Experience designing and delivering technical infrastructures to support a multi -client base.
Knowledge/Skills/ Abilities
Essential
- Setting high standards and driving a culture of excellence
- Delivering high quality outputs
- Engaging system partners and staff
- Provide and receive highly complex, sensitive, or contentious information, and present complex and sensitive information to large and influential groups.
- Negotiate on difficult and contentious issues including performance and change.
- Takes decisions on difficult and contentious issues where there may be several courses of action.
- Strategic thinking - ability to anticipate and resolve problems before they arise.
- Ability to analyse complex facts and situations, and develop a range of options.
- Demonstrated capability to plan over short, medium, and long-term timeframes and adjust plans and resource requirements accordingly
Person Specification
Education/Qualifications
Essential
- Educated to master's degree or equivalent level of experience working at a similar level in the specialist area.
- Evidence of continuing professional development and managerial development
- Cyber Security Qualification, such as CISSP, CISM,CISA
- Significant and evidenced experience in leading Security Operations
- Significant Experience in providing senior level cyber support through a team of technical experts.
- Complex Configuration, administration, planning, design, implementation, and management of security services
Experience
Essential
- An in depth understanding of a range of security authentication and encryption methods.
- Significant experience ensuring all services are in accordance with legislation and good practice.
- Understanding and experience of working in a full-service ICT operation.
- Experience designing and delivering technical infrastructures to support a multi -client base.
Knowledge/Skills/ Abilities
Essential
- Setting high standards and driving a culture of excellence
- Delivering high quality outputs
- Engaging system partners and staff
- Provide and receive highly complex, sensitive, or contentious information, and present complex and sensitive information to large and influential groups.
- Negotiate on difficult and contentious issues including performance and change.
- Takes decisions on difficult and contentious issues where there may be several courses of action.
- Strategic thinking - ability to anticipate and resolve problems before they arise.
- Ability to analyse complex facts and situations, and develop a range of options.
- Demonstrated capability to plan over short, medium, and long-term timeframes and adjust plans and resource requirements accordingly
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).
From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).
Additional information
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).
From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).