Cyber Operations purpose is to support safe care and build public trust by building NHS England's cyber resilience and enabling the wider health system to be cyber resilient, supporting the Transformation Directorate's purpose of delivering the best care and outcomes for the NHS. The GRC team, within the CISO Function, plays a critical role by establishing strong governance frameworks, maintaining clear and usable security policies and standards, delivering robust cyber risk management, and providing assurance through compliance, audit, and control effectiveness activities. The team ensures decision makers have clear, evidence‑based views of security posture and maturity. As a Cyber Security Analyst in our Security GRC team, you’ll play a key role in protecting what matters most, enabling the organisation to operate securely, confidently, and compliantly in an increasingly complex threat landscape. We are looking for talented security professionals to shape security outcomes, influence decision making, and work at the intersection of technology, risk, and business strategy. You won’t just be writing policies, you’ll be helping people understand risk, make better decisions, and embed security into everyday ways of working. The role ensures that security controls, policies and processes align with regulatory requirements, recognised standards and organisational risk appetite, enabling informed decision making and continuous improvement of the security posture.
Responsibilities
* Work with and support Cyber Security Leads to deliver against the requirements of the NHSE Security Model and Cyber Operations Business Plan, thereby helping to reduce overall security risk to the organisation.
* Engage diverse stakeholders on GRC activities to drive security improvements, acting as a point of contact, ensuring communications are actioned in a timely manner to ensure risks and issues are prioritised and managed accordingly.
* Support the development and management of key security metrics, dashboards and reporting to enable informed, evidence‑based decision making.
* Provide support to key system and service development teams to ensure a secure by design and continual assurance approach is maintained.
* Support the creation, development and review cycles of data security related technical and non‑technical policies, standards and implementation guides for systems, solutions and services.
* Support cyber security governance and assurance activities, producing meeting papers, tracking actions and decisions, and ensuring effective follow‑up and reporting to senior stakeholders.
* Undertake research and make use of available information from multiple data streams to support, advise and inform decision making on data security best practice.
* Support the organisation with the provision of security advice and guidance to relevant teams within NHS England assuring cyber resilience.
Benefits & Additional Information
* Our staff bring expertise across clinical, operational, commissioning, technology, data science, cyber security, software engineering, education and commercial specialisms – enabling us to design and deliver high‑quality NHS services.
* Enabling local systems and providers to improve the health of their people and patients and reduce health inequalities.
* Making the NHS a great place to work, where people can develop and make a difference.
* Working collaboratively to ensure our healthcare workforce has the right knowledge, skills, values and behaviours to deliver accessible, compassionate care.
* Optimising the use of digital technology, research, and innovation.
* Delivering value for money.
* Earlier this year, the Government announced that NHS England will gradually merge with the Department of Health and Social Care to create a smaller, more strategic centre that reduces duplication and waste. If successful at interview, we will initiate an Inter Authority Transfer (IAT) via the Electronic Staff Record (ESR). This retrieves key data from your current or previous NHS employer to support onboarding, including competency status, Continuous Service Dates (CSD) and annual leave entitlement. You may opt out at any stage of the process. Colleagues with a contractual office base are expected to spend, on average, at least 40% of their time working in‑person. Staff recruited from outside the NHS will usually be appointed at the bottom of the pay band.
#J-18808-Ljbffr