Job summary
Are you ready to make a meaningful management impact in the world of Cyber Security? Join our vibrant team at NHS Blood and Transplant, where innovation and excellence collide. For the past three years, we've been on an exciting journey to build a new Cyber Security Operations Centre (CSOC) at our World Class Barnsley Manufacturing Centre. Our Cyber Team is a multiple National Award-winning team, recognised across many Cyber domains for our excellence and culture.
In this exciting new role, you'll be at the forefront, leading the CSOC and delivering vital monitoring services that empower our organisation with the Cyber insights needed for informed decision-making. If you thrive in a high energy environment and are deeply committed to safeguarding people, assets, and our organisational reputation, and have people, management, technical skills, and Cyber expertise, we want you to be part of our close-knit team.
Your journey with us will involve managing, enhancing, and expanding CSOC capabilities. This is a rewarding role in an organisation dedicated to saving and improving lives. Join us, and let's shape the future of Cyber Security together at NHS Blood and Transplant.
Note: It is a condition of this role that you successfully obtain (or transfer in) UK Security Clearance (SC) Clearance.
Main duties of the job
In this role you will be responsible for managing the NHS Blood & Transplant Cyber Security Operations Centre (CSOC) services staff and tools, to provide 24x7 Cyber Security Service. Your responsibilities will include:
- Developing and enhancing the CSOC to reduce Cyber risks
- Representing NHS Blood & Transplant Cyber at internal and external forums
- Managing and maintaining the Cyber Security Area of Operation to keep work relevant
- Managing Cyber Security incident and event tickets in the CSOC
- Preparing and reviewing IT Changes which might impact Cyber Security posture
- Ensuring Cyber Tools are run in configurations that maintain or improve security posture
- Provisioning of relevant reporting against defined metrics new and old to demonstrate the effectiveness of CSOC
- Resolving Live Cyber Incidents to contain and mitigate Cyber Security Risk
- Covering the Head of Cyber Security role as required
You will be required to travel and spend time away from base, which will involve working irregular hours and overnight stays when required, with prior notice
You will be required to participate on call rotas and to provide cover during operational emergencies
About us
It takes all types of people to deliver the kind of service that saves and improves lives. At NHS Blood and Transplant, youll join a team of more than 6,000 people who are making a genuine difference to communities, families, friends, relatives and more across the UK. We play a unique and special role in the NHS by helping people do something extraordinary- donate blood, blood products, organs, tissues, or stem cells to save someone in need.
Our three core values are what set us apart. They guide and inspire everything we do.
By being caring, expertly meeting the needs of our patients and our people, and accepting nothing less than the best quality, we can do extraordinary work and help our people to do something extraordinary in their career, too. Three small words, one big difference - Caring, Expert and Quality. Together we'll save and improve more lives than ever.
You will join us on our journey to create an inclusive workplace and aim to reflect the diverse communities we work with, and we positiv
Job description
Job responsibilities
Note: It is a condition of this role that you successfully obtain (or transfer in) UK Security Clearance (SC) Clearance.
This role provides a hybrid-working option. You will be assigned a base location which could be one of NHSBT main centres/blood centres, which will be confirmed after the final interview and mutually agreed upon with the line manager during the verbal offer stage.
What we offer:
- NHSBT promotes flexible working opportunities where the role will allow.
- 27 days annual leave (pro rata for part-time) plus Bank Holidays, increasing to 29 days after 5 years service and to 33 days after 10 years.
- NHS pension scheme. The NHS Pension Scheme is a defined benefit scheme (not dependent on investment returns) Further details and outline of benefits can be found at: www.nhsbsa.nhs.uk/pensions
- Weve fostered a culture of continuous learning where colleagues are well-led, engaged, and encouraged to grow. We support you in reaching your full potential, both in your current role and future career. Our Thrive program embodies our commitment to learning and development, offering a wide range of activities to support your personal and professional growth. Its open to everyone at NHSBT, ensuring you have the resources to succeed and shine in your role.
Please view the attached recruitment profile which is a summary of the detailed Job Description and Person Specification for the full personal attributes we require for the role. You will need to demonstrate these throughout the recruitment process.
Job description
Job responsibilities
Note: It is a condition of this role that you successfully obtain (or transfer in) UK Security Clearance (SC) Clearance.
This role provides a hybrid-working option. You will be assigned a base location which could be one of NHSBT main centres/blood centres, which will be confirmed after the final interview and mutually agreed upon with the line manager during the verbal offer stage.
What we offer:
- NHSBT promotes flexible working opportunities where the role will allow.
- 27 days annual leave (pro rata for part-time) plus Bank Holidays, increasing to 29 days after 5 years service and to 33 days after 10 years.
- NHS pension scheme. The NHS Pension Scheme is a defined benefit scheme (not dependent on investment returns) Further details and outline of benefits can be found at: www.nhsbsa.nhs.uk/pensions
- Weve fostered a culture of continuous learning where colleagues are well-led, engaged, and encouraged to grow. We support you in reaching your full potential, both in your current role and future career. Our Thrive program embodies our commitment to learning and development, offering a wide range of activities to support your personal and professional growth. Its open to everyone at NHSBT, ensuring you have the resources to succeed and shine in your role.
Please view the attached recruitment profile which is a summary of the detailed Job Description and Person Specification for the full personal attributes we require for the role. You will need to demonstrate these throughout the recruitment process.
Person Specification
Qualifications
Essential
- Educated to master's degree level in a suitable Computer or related technical subject or demonstrable experience in a relevant field equivalent to master's level.
- Technical certification in suitable technologies such as CISCO networks, Microsoft Technologies, Oracle Cloud Infrastructure Security, Splunk! SIEM (Security Incident and Event Management) or willing to undertake same
- Demonstrate commitment to own continued professional development (CPD)
Experience
Essential
- Experienced in managing an unpredictable and extraordinarily complex portfolio of work to high degrees of accuracy
- Robust and demonstrable Cyber Security skills to interpret threats and apply sensible and proportionate remediations at pace
- Knowledge of developing, codifying, and implementing complex hard technical controls, soft policy, and process controls, and demonstrating deep understanding of how they blend to deliver practical assurance to the live business operation and associated processes
- Demonstrable experience of matrix-managing resources from Suppliers OR within NHSBT to develop and deliver solutions and outcomes at pace in both Operational, Strategic and Project working.
- Applicable knowledge of Cyber Security Frameworks and their translation within a heavily regulated environment
- Knowledge of relevant Law, Best Practices and Frameworks, and how they interact and operate within a Healthcare environment
- Experience and expertise in Business Continuity and Contingency planning, to contribute to the process of maintaining the Cyber Security Function in crisis or existential treat scenarios including threat and scenario modelling expertise
Person Specification
Qualifications
Essential
- Educated to master's degree level in a suitable Computer or related technical subject or demonstrable experience in a relevant field equivalent to master's level.
- Technical certification in suitable technologies such as CISCO networks, Microsoft Technologies, Oracle Cloud Infrastructure Security, Splunk! SIEM (Security Incident and Event Management) or willing to undertake same
- Demonstrate commitment to own continued professional development (CPD)
Experience
Essential
- Experienced in managing an unpredictable and extraordinarily complex portfolio of work to high degrees of accuracy
- Robust and demonstrable Cyber Security skills to interpret threats and apply sensible and proportionate remediations at pace
- Knowledge of developing, codifying, and implementing complex hard technical controls, soft policy, and process controls, and demonstrating deep understanding of how they blend to deliver practical assurance to the live business operation and associated processes
- Demonstrable experience of matrix-managing resources from Suppliers OR within NHSBT to develop and deliver solutions and outcomes at pace in both Operational, Strategic and Project working.
- Applicable knowledge of Cyber Security Frameworks and their translation within a heavily regulated environment
- Knowledge of relevant Law, Best Practices and Frameworks, and how they interact and operate within a Healthcare environment
- Experience and expertise in Business Continuity and Contingency planning, to contribute to the process of maintaining the Cyber Security Function in crisis or existential treat scenarios including threat and scenario modelling expertise
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
