Description
The Cyber Security Manager is responsible for leading the Trust's operational cyber security function and providing expert advice, assurance and guidance to support safe, resilient and secure digital services across The Princess Alexandra Hospital NHS Trust.
The postholder will lead on the development, implementation and continual improvement of cyber security controls, processes and governance arrangements to protect the confidentiality, integrity and availability of the Trust's systems, infrastructure, applications and information assets.
The postholder will provide specialist leadership across cyber risk management, security operations, incident response, vulnerability management, assurance, awareness and policy development.
Key duties and responsibilities include:
- Leading the day-to-day management and continual improvement of the Trust's cyber security capability
- Developing, implementing and maintaining cyber security policies, standards, procedures and guidance
- Providing expert cyber security advice to senior managers and colleagues
- Leading the identification, assessment, prioritisation and treatment of cyber security risks
- Overseeing vulnerability management processes
- Leading the Trust's response to cyber security incidents and events
- Ensuring appropriate monitoring, alerting, triage and escalation arrangements are in place
- Leading on cyber assurance activity
- Supporting the development and testing of cyber resilience, business continuity and disaster recovery arrangements
- Embedding secure by design principles into digital projects
- Leading cyber security review and assurance for significant technical change
- Supporting the completion and review of cyber security questionnaires and related assurance documentation
- Working closely with Information Governance, data protection, clinical safety, infrastructure, applications and supplier management colleagues
- Producing high-quality reports, dashboards and briefings on cyber risk, incidents, vulnerabilities, assurance and performance
- Managing and developing staff within the cyber security function
- Contributing to the development of cyber business cases, service improvement plans and investment proposals
- Playing a key role in the development, implementation and ongoing review of the Trust's cyber security strategy and roadmap
- Building and maintaining effective working relationships with NHS England, partner organisations, auditors, suppliers and specialist third parties
- Leading and supporting cyber awareness and education activity across the Trust
- Keeping abreast of emerging cyber threats, vulnerabilities, standards, legislation and NHS guidance