Overview
Fixed Term Contract until January 2027. At HC-One, we’re committed to delivering high-quality, person-centred care across our network of care homes. As digital transformation shapes how we operate, the security and integrity of our systems and data are critical.
About the Role
We’re looking for a skilled and proactive Cyber Security Specialist to join our Cyber team. Working collaboratively with the wider DDaT function, you will play a central role in monitoring, detecting, and responding to cyber threats and vulnerabilities — helping to protect our digital infrastructure, our residents, and our colleagues.
You’re an analytical thinker with hands-on experience in cyber security and a strong understanding of threat detection, risk mitigation, and vulnerability management. Comfortable working across technologies and teams, you’re able to apply technical knowledge with sound judgment, and you communicate clearly — whether advising a peer or presenting to a senior stakeholder. You’re calm under pressure, focused on detail, and passionate about keeping systems secure and resilient. Above all, you care about using your skills to protect people and make a positive impact.
Responsibilities
* Security Monitoring & Threat Response: Monitor, analyse, and respond to security events using Microsoft security tools, SIEM platforms, and EDR solutions.
* Threat hunting, investigate anomalies, and escalate security incidents as needed.
* Manage security configurations in Entra ID and M365, including MFA, DLP, and privileged access policies.
* Coordinate annual penetration testing with external suppliers and follow through on remediation.
* Vulnerability & Risk Management: Collaborate with DDaT colleagues to conduct vulnerability assessments, validate findings, and recommend mitigation strategies.
* Maintain endpoint protection, MDM, and Defender Suite configurations.
* Support and contribute to the Cyber Risk Management Framework.
* Incident Management & Reporting: Lead investigations into incidents, documenting root cause, actions taken, and lessons learned.
* Record metrics and provide regular reports to senior leadership.
* Continuously review email and web filtering tools to prevent phishing, malware and other key threats.
* Collaboration & Culture: Deliver cyber awareness training and assist with onboarding for new colleagues.
* Support wider teams (Legal, Data Protection, Delivery) with cyber security advice.
* Promote a security-first culture through engagement, education, and communication.
* Governance & Documentation: Assist in maintaining and reviewing security policies and procedures.
* Support audits, third-party risk assessments, and compliance activities.
* Align work with standards such as ISO 27001, Cyber Essentials, and CAF (NCSC, DSPT).
Essential Qualifications & Experience
* Degree in Cyber Security, Computer Science, IT, or equivalent practical experience.
* Industry certifications such as CompTIA Security+, CEH, or Microsoft Security (e.g., AZ-500, SC-200, SC-300, SC-400, SC-100).
* Strong knowledge of:
* Microsoft security tools, Defender Suite, Entra ID, M365
* Network security, SIEM platforms, and endpoint protection
* Email/web filtering protocols (SPF, DKIM, DMARC)
* Penetration testing tools and vulnerability management
* Risk management
* Incident management
Desirable
* Familiarity with ISO 27001, ISO 27005, Cyber Essentials, GDPR
* Experience working within an ITIL environment, including incident and problem management
* Knowledge of audit processes and cyber governance frameworks
Benefits
* Award-winning learning and development
* 25 days annual leave
* GP online - 24/7 GP consultation via app, for you and your children under 16
* Colleague discounts – access to over 1600 high street discounts
* Wellbeing - confidential Employee Assistance Programme (24/7 support)
Note: This description reflects the responsibilities and requirements of the role. Safeguarding is everyone’s responsibility, and HC-One provides appropriate training and resources.
#J-18808-Ljbffr