Job Summary
We are seeking a highly skilled and motivated Information Security Analyst to join our Digital Data & Technology (DDaT) team. This is a pivotal role supporting the Chief Information Security Officer (CISO) in delivering cyber security services across the Trust and wider health and care system.
Main Duties of the Job
The role will support the CISO in delivering digital safety, security and overall improvement, adhering to the Target Operating Model. The Information Security Analyst will manage the delivery of all cyber security related services, including cyber risk management, Data Security Protection Toolkit (DSPT) compliance against cyber related assertions, policy and procedure lifecycle management and ensuring the Trust’s information compliance adheres to the Cyber Assurance Framework (CAF) and ISO27001.
About Us
Diversity makes us interesting… Inclusion is what will make us outstanding. Inequality exists and the journey to eliminate it is not easy. Every step we take will be a purposeful step forward to deliver a truly inclusive culture where all our people are enabled to deliver outstanding care, where background is no barrier, and where everyone can be their authentic self and we truly represent our patient community. We are committed to equal opportunities and welcome applications from all sections of the community, regardless of any protected characteristics. Reasonable adjustments will be made for disabled applicants where possible. All applicants who have a disability and meet the minimum criteria for the post can opt for a guaranteed interview.
Details
* Date Posted: 29 October 2025
* Pay Scheme: Agenda for change
* Band: Band 8a
* Salary: £55,690 to £62,682 a year Per Annum
* Contract: Permanent
* Working Pattern: Full‑time
* Reference Number: 193‑7563216COR
* Job Location: Royal Berkshire Hospital Princes House, London Road, Reading, RG1 5UZ
Job Description
Job Responsibilities
* Support the CISO in developing, implementing and monitoring a strategic, comprehensive cyber, enterprise information security, resilience, information governance and IT risk management strategy and plan.
* Provide expert cyber security advice to senior stakeholders and technical teams across the organisation.
* Work directly with key stakeholders to facilitate risk assessment and risk management processes.
* Collaborate with all departments within the Trust (and Integrated Care System) to identify and disseminate high‑quality information that facilitates effective cyber and information security management and improvement.
* Use advanced analytic tools (artificial intelligence) to determine emerging threat patterns and vulnerabilities.
* Scope and deliver penetration tests and ensure actions from vulnerability assessments are resolved.
* Lead on audit and audit preparation relating to IT security.
* Maintain compliance with various standards in place (e.g. Data Security and Protection Toolkit, CareCERT, Cyber Essentials+, Network and Information Systems Regulations).
* Act as the Trust’s advisor on cyber security protection, detection, response and recovery.
* Analyse complex data and oversee the production of detailed information.
* Work closely with the Emergency Preparedness, Resilience and Response teams to ensure that preparations include events relating to cyber security.
* Evaluate options and be able to persuade and influence others to ensure that risks in relation to cyber, resilience and information integrity and security are addressed appropriately.
* Develop business cases and propose funding allocations based on intelligence on the areas of greatest risk and benefit.
* Develop and implement a cyber, resilience and information integrity and security strategy, ensuring all partners endorse the strategy.
* Ensure that all local information and cyber security strategies and activities align with the national Plan.
* Assist with the development of disaster recovery and business continuity strategies for Trust digital services, wider stakeholders and partner organisations.
* Work within professional standards including PRINCE II and ITIL.
* Continuously upgrade skills to reflect rapid changes in technology and the Trust’s needs.
* Collaborate closely with the Trust Improvement Programme Board to drive business transformation and change management.
Person Specification
Essential Qualifications
* ITIL v3 Service Management Qualification
* Educated to degree level or equivalent
* Formal certification (ISACA: Certified Information Security Manager (CISM), CISSP, or CRISC) and/or formal training in information security standards and best practice (e.g. ISO 27001/2, COBIT), or equivalent work experience demonstrating understanding of the same.
Essential Experience
* Extensive experience of developing and delivering an Information Security service to a large complex organisation using confidential and/or sensitive information.
Desirable
* IT experience gained in both Acute and Community settings.
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Employer Details
Royal Berkshire NHS Foundation Trust
Royal Berkshire Hospital
Princes House, London Road
Reading
RG1 5UZ
Employer's website: https://www.royalberkshire.nhs.uk/
#J-18808-Ljbffr