IT Security Engineer

• Responsible for a range Trust IT Security policy implementation and development shaping the trusts long term IT patching cycle, to ensure a seamless and consistent delivery of IT Services
• Assist in the translation of Trust Long term strategic plans, objectives and policy decisions into operational activity and provide feedback to ensure continuous quality improvements
• Maintain high awareness of developing standards and innovations in the area of IT Security, and under the guidance of the Head of IT Security ensure the trust exploit opportunities
• Ensure services are supported to agreed hours of service to agreed service levels by participation within the on-call rota
• Act as an authority and provide specialist knowledge across the range of IT security procedures and practices
• Work with stakeholders to ensure clear definition and agreement of service
• Conduct risk assessments as appropriate and advise the Trust on IT Security concerns
• When required, liaise with external/third parties to ensure the Trusts IT Security stance is not compromised
• Provide specialist knowledge as required or requested by other departments on the procurement of new solutions, systems or services
• Work with the Heads of IT Services to ensure the IT systems and services are affordable and cost effective
• To contribute to the overall development of the Trust, to identify present and future opportunities, threats and risks in the IT environment with relation to IT security
• Promote effective use of IT systems and services, developing IT Security awareness and promoting a culture of IT Security
• Be responsible for managing and maintaining the various highly complex IT Security systems and services, as well as advising on future technologies, research and development
• Participate in continued professional development, training and courses as identified ensuring skills and knowledge are kept current
• Provide specialist knowledge and advice on the effective use of Trust IT Services to staff
• Identify staff IT Security knowledge gaps, develop and promote an IT Security awareness program in conjunction with other departments as required
• Assist the Head of IT Security to identify and develop quality measures to ensure the highest levels of service delivery are achieved
• Carry out complex projects pertinent to the work of the Trust under the direction of the Head of IT Security
• Conduct vulnerability assessments and other associated activities as appropriate
• Liaise with NHS England, NCSC and other relevant bodies as required ensuring IT Security advisories, directives and notifications are actioned and logged
• Ensure all systems and applications where applicable are kept up to date and are encompassed in the patch management routine
• Assist the Head of IT Security with developing and maintaining an Incident Response Plan and Computer Emergency Response Team in relation to severe IT security incidents
• Take part in activities that lead to personal and/or team growth
• Attend supervision and appraisal sessions with the Line Manager
• Lead on investigating IT Security issues using analytical & judgmental skills to fault find
• Travel to other Trust sites maybe required on an ad-hoc basis
• Assume wider responsibilities as assigned by the Head of IT Security

• Substantial experience in an IT role, which should include IT Security responsibility & dealing with vulnerabilities, risks & threats
• Familiarity with an assortment of security technologies from different vendors (e.g., Tenable Nessus, Microsoft XDR, Forcepoint Web)
• Achieved, or evidence of working towards & ability to obtain recognized IT Security qualifications such as CISMP, CISSP, CASP etc
• Evidence of continuing professional development
• Full UK Driving Licence
• Current knowledge on latest cyber threats & mitigation of
• Knowledge of hardening infrastructure systems both on premise & in the cloud
• Familiarity with patch management methodologies
• Familiarity with Microsoft cloud technologies (e.g., Microsoft Exchange, Azure, Intune, SharePoint, Teams)
• Confident and self-motivated
• Ability to work with others or part of a team
• Ability to prioritise workload and act under pressure

Knowledge of NHS IT systems and services

• 9.5% on-call allowance in addition to the band 6 salary
• section 2 unsocial hours enhancements
• Mileage expense is available where appropriate for Trust business