Cyber Security AnalystNHS

Job summary

In this role, you'll be trusted to protect essential digital services, ensuring systems remain secure, resilient and well managed. You'll work with cyber security, compliance and infrastructure colleagues to reduce risk and respond effectively to security threats and incidents. You may also be required to attend sites if needed.

Main duties of the job

What you'll do:

• Monitor security tools, vulnerabilities and alerts, taking action to manage risks
• Support secure design across IT projects, infrastructure and new technology
• Investigate cyber security incidents, coordinate responses and contribute to post-incident reviews
• Help develop security standards, disaster recovery plans and business continuity arrangements
• Provide technical advice, guidance and mentoring to colleagues across the organisation [810-P1060...Chris (N3I | PDF]

What were looking for:

• A relevant IT degree or equivalent qualifications, training or experience
• A recognised security qualification, such as SSCP, CCSP, CEH or CISM
• Experience working in cyber security within a large computing environment
• Strong knowledge of security controls, system hardening, intrusion detection and incident response
• Clear communication, organisation and problem-solving skills, with confidence managing priorities

Job description

The Cyber Security Analyst will support the Head of Cyber Security and Compliance to ensure that services are secure in their design and implementation and that risks to the security are appropriately managed. The roles key responsibilities are: Assist in developing and evolving the security roadmap, including tooling optimisation and risk management. Ensure secure design & architecture are implemented through the provision of expert guidance across IT projects and infrastructure. Assist in defining and deploying control baselines, templates, and standards within the business. Manage and monitor security operations tools such as Defender, SIEM products and vulnerability management systems ensuring systems are appropriately configured and alerts are dealt with in a timely manner. Assisting in evaluation, resolution and reporting of any High Severity CareCERT alerts within the 72 hours required Assisting in developing incident response plans. Lead triage, coordinate incident responses, and oversee post-incident reviews. Maintain hardening guides, architecture diagrams, and lead working groups. Cross-team and cross-organisational alignment: Foster collaboration and consistency across estate wide cybersecurity efforts. The role acts as a further escalation point within the business for technical and/or operational issues related to cyber security and general infrastructure queries. N3i Cyber Security Analyst| Page 1 This role is both technical and operational and will involve monitoring and maintaining identified cyber systems and processes to ensure they remain operational and secure including but not limited to data centre, site servers and networks acting as a point of escalation for other teams on all things cyber security related. The role will be required to attend these sites are required to resolve issues and/or meet with stakeholders. You will assist in the development of disaster recovery plans and procedures with other parts of the business and ensuring these are fit for purpose, kept up to date and regularly tested. The role requires you to keep abreast of technological advancements and emerging trends in hardware, software, and systems management to inform decision-making about cyber security. Together with the cyber security and compliance and infrastructure teams, you will help to deliver a 1st, 2nd and 3rd line support facility for CHCP, N3i and our customers and be responsible for keeping customers, staff and other colleagues fully informed of the progress of calls raised with the IT Service Desk, maintaining clear, high quality records on actions undertaken supporting resolving IT incidents.

About us

We welcome applications from people with different backgrounds and experiences, and value fairness, respect, inclusion and ideas that help us improve.