Overview
The NHS Counter Fraud Authority (NHSCFA) is the national body responsible for all matters relating to the prevention, detection and investigation of economic crime across the NHS. Further information about our work and annual plan for delivering this is available on our website.
An exciting opportunity has arisen to join the NHSCFA Technology team as an Information & Cyber Security Analyst. We are looking for someone with a proven background in Information/Cyber security and a flexible 'can do' attitude to work in the Information & Cyber Security Team who manage and maintain the security of NHSCFA ICT infrastructure and information systems.
You will work to proactively monitor IT systems; identify, manage and resolve security incidents, vulnerabilities, security alerts and threats; potentially perform penetration testing; and contribute to maintaining security certifications, assurances and accreditations.
Potential applicants can contact Simon Clark at simon.clark@nhscfa.gov.uk for an informal chat if they have any questions regarding the role. Role requires Security Clearance. Interviews will be face to face at Canary Wharf on 24th & 25th September. We reserve the right to close this vacancy before the advertised closing date should we receive a significant number of applications.
Main duties of the job
* Working as part of the Information Security team to actively monitor, maintain, and develop systems and processes to ensure the security of NHSCFA ICT infrastructure and information systems.
* To manage and report on processes and systems that ensure the security of the IT network infrastructure and information systems.
* Assist the team with identifying and resolving security incidents, vulnerabilities and risks, including proactively monitoring ICT systems, analysing firewall rules and performing penetration tests.
* Maintain a solid knowledge of information security principles and practices, ensuring timely technical support to satisfy the organisation\'s business needs.
About us
We have offices based in Coventry, Newcastle and London and also offer flexible and home-based working. We value diversity and aim to recruit a workforce which reflects our diverse communities. We welcome applications irrespective of age, disability, gender, race or ethnicity, religion or belief, sexual orientation, or other personal circumstances. We have policies to ensure fair treatment at every stage of the recruitment process, including reasonable adjustments for people with a disability. We accept secondments from public and private sectors; you should have agreement to being released from your current role in principle prior to submitting an application. When you apply for this role, you will be redirected to our recruitment system TRAC. Please apply without delay as we reserve the right to close vacancies when we have received sufficient applications. The CFA does not hold a sponsor licence for skilled worker visas.
Job responsibilities
Manage, monitor, and develop NHSCFA cyber security operations and ICT security infrastructure to manage and reduce cyber risk and mitigate cyber threats. Actively monitor NHSCFA ICT systems: manage and operate IT security monitoring tools and systems; review IT system alerts; triage to eliminate false positives. Identify threats that have entered the network. Evaluate and address system generated and user-reported security incidents: identify affected systems and scope of the incident; analyze running processes and configurations on affected systems; carry out in-depth threat intelligence analysis to identify an attack type, source, entry point, and possible remediation; implement remediation or escalate incident. Support the ICT Security Incident Management Process as a member of the NHSCFA Security Incident Response Team. Manage ICT Security service requests and incidents via the NHSCFA Service Desk system. Ensure appropriate access control to systems is maintained.
Person Specification
Essential
* Experience of 1st-3rd level technical support of IT infrastructure or security, both in person and remote.
* Demonstrate detailed knowledge of IT system monitoring (SIEM) and Security Incident Management.
* Demonstrate detailed knowledge of Information Security in several areas: intrusion detection and prevention systems; vulnerability management; network technology and operations; Windows 10 and Windows Server; SUSE Linux; Microsoft 365; Information Security Management Systems ISO27001; Risk Management Process; IT system auditing.
* Experience with IT security architectures.
* Knowledge in areas such as Encryption Systems; Security Products (Authentication, Data Loss Prevention, SIEM); Firewall/WAF administration.
* Degree in computer science, information technology, or a related field or equivalent experience (e.g., network operations plus specialist security certification(s)).
* Thorough understanding of the use of remote management tools for supporting a distributed user base.
Desirable
* Knowledge of Information Security in several areas in addition to Essential: Windows 10/Server, SUSE Linux, Microsoft 365, ISO27001, Risk Management, PSN/NHS N3, Database Security, Microsoft Sentinel, software security architecture and testing.
* Recognised qualifications such as EC-Council Certified SOC Analyst (CSA), EC-Council Certified Ethical Hacker, CompTIA Security+, CompTIA Network+.
Employer details
Employer name
NHS Counter Fraud Authority
Address
7th Floor, HM Government Hub
10 South Colonnade Canary Wharf
London
E14 4PU
Employer\'s website
#J-18808-Ljbffr