Cyber Security Specialist

The Cyber Security Specialist will work as Technical lead to help manage cyber security compliance across the Trusts Digital Infrastructure and applications, reducing our Threat Exposure Score and minimising the attack surface across.

The post will liaise across Desktop, Applications, Systems and Network Teams to ensure all colleagues are kept updated and take the requisite actions to remediate threats to maintain security and integrity of Trust systems., Job summary

• To monitor privilege account usage working with the relevant engineers to ensure security requirements are met i.e. concept of least privilege, - separation of admin accounts and day-to-day accounts etc.
• To proactively monitor the Digital estate using the cyber tools available to identify potential threats, vulnerabilities and indicators of compromise. Then acting on the highly complex information in a suitable manner as required to allow The Trust to respond to and mitigate risk.
• Work with the relevant teams to ensure that all systems, (including mobile devices, PCs, Servers and network devices etc), are patched to recommended levels, applying security fixes and configurations as recommended by NHS Digital CareCERT.
• To use the cyber tool set to undertake in house audits of the Digital estate and produce the required reports.
• To assist auditors and third-party companies to undertake IT security audits. With a view to maintaining continuous improvement within the estate.
• To maintain continual professional development to stay up to date with changing technologies and complete any relevant training that comes with this position

• Degree in a computer related subject / Level 4 Apprenticeship in IT or
• An equivalent level of knowledge and expertise acquired by experience
• Willingness to study and complete additional cyber courses and qualifications
• Relevant post graduate cyber specific qualifications, i.e. CISSP, relevant product specific training in SIEM / AV / Vulnerability scanning etc, technical qualifications i.e. MCSE etc or an equivalent level of knowledge and expertise acquired by experience.

Desirable

• ITIL foundation or equivalent
• CISSP (Certified Information Systems Security Professional)
• Understanding of NHS standards, practices and operations
• Experience of non-Microsoft Operating systems such as Unix/Linux.

Person Specification

Qualifications

Essential

• Degree in a computer related subject / Level 4 Apprenticeship in IT or
• An equivalent level of knowledge and expertise acquired by experience
• Willingness to study and complete additional cyber courses and qualifications
• Relevant post graduate cyber specific qualifications, i.e. CISSP, relevant product specific training in SIEM / AV / Vulnerability scanning etc, technical qualifications i.e. MCSE etc or an equivalent level of knowledge and expertise acquired by experience.

Desirable

• ITIL foundation or equivalent
• CISSP (Certified Information Systems Security Professional)
• Understanding of NHS standards, practices and operations
• Experience of non-Microsoft Operating systems such as Unix/Linux.

Working as a partnership, both Isle of Wight NHS Trust andPortsmouth Hospitals University NHS Trust have a shared vision for excellencein care for our patients and communities; with a set of strategic aimsunderpinning how we will achieve this. The single corporate service is delivered across bothorganisations. You may be based at either IWT or PHU and individuals maybe required to undertake business travel between sites. For leaders managingstaff across multi-site locations, you will need to be visible and provide inperson leadership. The arrangements and frequency will be agreed locally. The health and wellbeing of our staff is at the forefront ofeverything we do. We are proud to be able to offer our staff some fantasticbenefits including our on-site Nursery, access to our free Beach Hut for thoselong summer days, our on-site Wellness Centre including a gym and a swimmingpool, access to our fantastic staff networks including LGBTQ, Race Equality andDisAbility, and awards ceremonies to recognise your achievements. We believe wecan offer support to all of our staff when they need it the most.