EPRR Business Continuity Specialist (Cyber Focus)NHS

Job summary

The EPRR Business Continuity Specialist (Cyber Focus) will lead the development and implementation of the Trust's cyber resilience and business continuity programme, ensuring the organisation can maintain safe and effective services during cyber-attacks, digital outages, and the loss of critical IT systems.

Working closely with clinical, operational, digital and corporate teams, the post holder will identify critical digital dependencies, undertake business impact assessments, and develop robust continuity plans that align with NHS England EPRR standards, NCSC guidance, and wider organisational resilience requirements.

Main duties of the job

The role will be responsible for embedding cyber-related business continuity arrangements across the Trust by supporting Clinical Management Groups (CMGs) and corporate services to develop, maintain and test local continuity plans.

The post holder will design and facilitate training, exercises and simulations to strengthen preparedness, evaluate organisational readiness, and drive continuous improvement through the identification and implementation of lessons learned. They will also contribute to major incident planning and provide specialist advice on the operational impacts of digital disruption.

As a key member of the EPRR function, the post holder will work collaboratively with Digital, Information Governance, Cyber Security and external partners to strengthen organisational resilience, provide assurance against regulatory requirements, and support the Trust's ability to respond to and recover from cyber incidents.

The role will play a critical part in reducing patient safety, operational, financial and reputational risks associated with the increasing cyber threat facing NHS organisations.

Job description

Cyber Resilience and Business Continuity

The post holder will lead the development, implementation and maintenance of the Trust's Cyber-Attack Business Continuity Plan, ensuring alignment with NHS England EPRR standards, NCSC guidance, Data Security and Protection Toolkit (DSPT) requirements, and organisational resilience objectives.

The post holder will work collaboratively with Clinical Management Groups (CMGs), Corporate Directorates, Digital & Data Services and key stakeholders to ensure appropriate arrangements are in place to maintain critical services during cyber incidents, digital outages and loss of key systems.

Business Impact Assessment and Digital Dependency Mapping

The post holder will facilitate and support Business Impact Assessments across clinical and corporate services to identify critical activities, recovery priorities, key dependencies and acceptable downtime periods.

They will maintain an understanding of the Trust's critical digital systems and associated operational dependencies, ensuring continuity arrangements are proportionate to identified risks and vulnerabilities.

The post holder will support the EPRR Team ensure the Trust has in place an ambitious EPRR Work Programme with the aim of ensuring continued improvement and establishing best practice within EPRR.

Assurance, Governance and Compliance

The post holder will support the provision of assurance regarding business continuity and cyber resilience arrangements through the monitoring, review and reporting of compliance with relevant legislation, national guidance and Trust policies.

The post holder will prepare reports, briefings and assurance documentation for committees, senior managers and other governance groups as required.

The post holder will support the EPRR Team in the development of robust plans which in turn, will support the Trust and its stakeholders to respond to incidents and emergencies.

Service and CMG Support

The post holder will work closely with CMGs and Corporate Directorates to develop, review and maintain local business continuity plans, ensuring that services are prepared to respond effectively to the loss of critical digital systems and other major disruptions.

They will provide specialist advice and guidance to managers and service leads on continuity planning, resilience improvement and recovery arrangements.

Working with Digital and Cyber Teams

The post holder will establish strong working relationships with Digital & Data Services, Information Governance and Cyber Security colleagues to ensure continuity and recovery arrangements are aligned with technical disaster recovery and cyber incident management plans.

The post holder will support the review and development of recovery strategies, recovery priorities and system restoration arrangements for critical Trust services.

Learning and Continuous Improvement

The post holder will contribute to the identification, capture and implementation of lessons identified from incidents, exercises, audits and assurance reviews, ensuring that improvements are embedded into plans, policies, procedures and training programmes.

Policy

The post holder will support with the ongoing development, review, andimplementation of the Trusts Business Continuity Management Policy. This shouldensure the relevant requirements of NHS Englands core standards for EPRR andISO:22301 are implemented across the organisation as required.

Support UHL Response to Incidents

The post holder will provide support and advice during incidents to the Trustsincident coordination teams.

Professional Relationships

The post holder may need to represent the Trust and promote UHL and the EPRR

Teams interests in multi-agency meetings. This may include disseminating relevantinformation as well as developing and maintaining effective working relationshipswith stakeholders.

Information

The post holder will deal with sensitive and confidential material from both within theTrust and other Category 1 and 2 responders.

Personal Development

The post holder will be responsible for undertaking personal development and training to enhance skills and expertise and to maintain up-to-date knowledge of legislation and policies relating to all aspects of EPRR, including business continuity.

Please see job description/person specification for full details on the role.

About us

Our new strategy, developed with the support and feedback of colleagues, patients, and partners, is our compass for the next seven years (2023-2030).

We have four primary goals:

• high-quality care for all,
• being a great place to work,
• partnerships for impact, and
• research and education excellence

And we will embed health equality in all we do - taking active steps to reduce the avoidable differences in healthcare that some people face, working in partnership with communities.

Our strategy is underpinned by new values and we will work to ensure they are an everyday reality for all:

• we are compassionate,
• we are proud,
• we are inclusive, and
• we are one team

This is an exciting moment as we look to the future with clarity on what we already do well and where we need to focus our energies to make an even bigger difference for the people we serve.

About the University Hospitals of Leicester NHS Trust:

https://www.uhleicester.nhs.uk