Job summary
Aneurin Bevan University Health Board (ABUHB) has a large and complex ICT service that underpins the delivery of digital health care. ICT supports around 17,000 users and over 200 services across more than 120 sites. The adoption and expectations placed upon digital healthcare are expected to grow substantially over the next 5 years as the health board adopts mobility both in primary and secondary care settings.
The primary responsibility of the Cyber Security Manager is to implement, maintain and improve security within both new and existing Health Board ICT systems. This is a critical role within Aneurin Bevan University Health Board in terms of developing effective Cyber Security strategies, controls, and management of the Cyber Security team. Ensuring enhancement of Business Security aligns with the overall strategic goals of the Health Board.
The post holder is a senior position and will have acquired a high level of cyber security technical knowledge and understands the relevant digital Security standards and guidelines such as ISO27001 / Cyber Essentials +.
You will support the strategic development for Cyber Security services including representation and implementation of the Health Board Cyber leadership and Information Governance) framework.
Main duties of the job
The Head of Cyber Security provides strategic leadership and operational oversight for the organisation's cyber security posture, ensuring robust protection of digital assets, clinical systems, and sensitive information. The role is responsible for developing and implementing the cyber security strategy, managing risk, leading incident response, and ensuring compliance with national standards, regulatory requirements, and NHS Wales policies. Working closely with Information Governance, Digital Services, and executive leadership, the Head of Cyber Security drives a proactive security culture, oversees monitoring and threat intelligence functions, and ensures that technical and organisational controls are effective, resilient, and continually improving. This role also provides expert advice on emerging threats and technologies, supports major digital transformation programmes, and ensures that cyber security is embedded across organisational decision-making.
About us
Aneurin Bevan University Health Board is a multi-award-winning NHS organisation with a passion for caring. The Health Board provides an exceptional workplace where you can feel trusted and valued. Whatever your specialty or stage in your career, we have opportunities for everyone to start, grow and build your career. The health board provides integrated acute, primary and community care serving a population of 650,000 and employing over 16,000 staff.
We offer a fantastic benefits package and extensive training and development opportunities with paid mandatory training, excellent in-house programmes, opportunities to complete recognised qualifications and professional career pathways including a range of management development programmes. We offer flexible working and promote a healthy work life balance, provide occupational health support and an ambitious plan for a Wellbeing Centre of Excellence to support you at work.
Our Clinical Futures strategy continues to enhance and promote care closer to home as well as high quality hospital care when needed. Join us on our journey to pioneer new ways of working and deliver a world-class healthcare service fit for the future.
Job description
Job responsibilities
You will be able to find a full Job description and Person Specification attached within the supporting documents or please click Apply now to view in Trac.
Job description
Job responsibilities
You will be able to find a full Job description and Person Specification attached within the supporting documents or please click Apply now to view in Trac.
Person Specification
Experience
Essential
- Track record of achievement at a senior management level. Experience of dealing with major Digital private sector providers in delivering major security projects and solutions. Application form and interview. 8 Track record of innovation and implementation.
Desirable
- Membership of professional body, e.g. BCS
Qualification
Essential
- Good working knowledge of the BS ISO/IEC 27001 Information Security standard
Desirable
- ITIL Foundation qualification
Qualifications
Essential
- Cyber Security Qualifications or working towards
Desirable
- Management Qualification or equivalent
Qualifications
Essential
- Educated to Masters Level in a relevant Digital subject or equivalent experience
Desirable
Knowledge
Essential
- Detailed working knowledge of application and network security
Desirable
- A clear understanding and appreciation of the processes supporting clinical care and the approaches required to design and implement the supporting security environment
Aptitude and Ability
Essential
- Excellent communication and interpersonal when dealing with highly technical information to a wide range of stakeholders across organisational boundaries.
Desirable
- Experience of dealing with major Digital private sector providers in delivering major security projects and solutions.
Person Specification
Experience
Essential
- Track record of achievement at a senior management level. Experience of dealing with major Digital private sector providers in delivering major security projects and solutions. Application form and interview. 8 Track record of innovation and implementation.
Desirable
- Membership of professional body, e.g. BCS
Qualification
Essential
- Good working knowledge of the BS ISO/IEC 27001 Information Security standard
Desirable
- ITIL Foundation qualification
Qualifications
Essential
- Cyber Security Qualifications or working towards
Desirable
- Management Qualification or equivalent
Qualifications
Essential
- Educated to Masters Level in a relevant Digital subject or equivalent experience
Desirable
Knowledge
Essential
- Detailed working knowledge of application and network security
Desirable
- A clear understanding and appreciation of the processes supporting clinical care and the approaches required to design and implement the supporting security environment
Aptitude and Ability
Essential
- Excellent communication and interpersonal when dealing with highly technical information to a wide range of stakeholders across organisational boundaries.
Desirable
- Experience of dealing with major Digital private sector providers in delivering major security projects and solutions.
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).
From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).
Additional information
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).
From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).