An exciting opportunity has arisen for a Cyber Security Manager to join the forward-thinking IT department at Southern Health. Reporting to the Head of ICT Operations, the Cyber Security Manager - Technical will support the organisations technical elements of the cyber security service.

The Trust is proud of its current security posture and you will have opportunity to test and make recommendations for improvements. With very positive IT system security levels, you will be joining a team well versed in IT security matters.

Our cyber security function is split into two parts, Technical and Assurance. This role will focus on the technical elements within the Southern Health environment and will later address the Solent services as the trusts integrate. You will get to know the technical environments so as to provide that additional layer of cyber expertise adding that much needed layer of protection and advice.

To excel in this post, you'll be highly skilled in Cyber matters and have previous experience in a similar role particularly at a management level. You'll have a good track record of managing staff and incidents, and play a key part in developing our future IT Security strategies through cyber controls and compliance.

Main duties of the job

With a focus on confidentiality, integrity and availability of the hardware and software assets at Southern Health, you will forge a great relationship with Systems and Networking engineers, the Service Desk and Device Support teams so as to maintain and enhance the current high security standards.

You will provide technical expertise to the Cyber Security Manager - Assurance on cyber elements of the DSPT, DCB1596, ISO27001, ISO9001 and Cyber Essentials Plus.

You will review and co-develop the Trust's suite of cyber security policies, procedures and standards to ensure that all infrastructure and systems are protected against Cyber threats. All intelligence feeds must be reviewed and acted upon. Through regular monitoring for incidents and/or suspicious activity of our IT systems and infrastructure you will act swiftly to investigate and remediate any concerns. Reliance on the Cyber Associates Network is important to this role.

Key to the general security levels within the staff is cyber awareness training and education programmes. You will design, review and deliver these as well as ensuring that staff are aware of their responsibilities with regard to cyber security.

Alongside the Cyber Security Manager - Assurance, you will undertake regular exercises to test DR and IR plans and update procedures as necessary. As our systems and data security measures will need regular testing, you will develop and implement ad-hoc audits to make relevant improvements.

About us

Southern Health is one of the largest NHS Foundation Trusts in the UK, specialising in mental health and learning disabilities, as well as offering physical health community-based services.

With a workforce of more than 7000 and a footprint that spans more than 200 sites across Hampshire, we're committed to providing the best possible healthcare, reaching a range of diverse communities, whilst placing patients and staff at the forefront of all our endeavours.

We are currently working closely with other NHS Trusts to combine all our collective community, mental health, and learning disability services, with the plan to create a new larger, more integrated and accessible organisation.

The transformation will happen in stages Hampshire CAMHS, part of Sussex Partnership NHS Foundation Trust joined Southern Health in February 2024, with Isle of Wight NHS Trust mental health and community services transitioning across in May 2024. The final combination of Southern Health and Solent NHS Trust services is expected in late 2024, when our new organisation, to be known as Hampshire and Isle of Wight Healthcare NHS Foundation Trust, will be formed.

Our new Trust will continue to cater to the unique needs of different communities, making healthcare across the county more accessible, as well as offering staff more opportunities for career development, training and partnership working.

Join us as we embark on this exciting journey to shape the future of healthcare in Hampshire.

Job description

Job responsibilities

Further information about the Trust and this role can be found on the Job Description and Person Specification document attached.

We are happy to talk Flexible Working - all requests for flexible working options can be discussed as part of the interview process.

Person Specification

Qualifications

Essential

• Relevant degree or equivalent experience in Cyber Security or a related field.
• Technical accreditation / specialist qualification in cyber security (E.g. CISSP, CISM, CCSP or SSCP) or other relevant cyber security certifications.
• Evidenced continued professional development within cyber security.

Desirable

• Masters degree in Cyber Security

Experience

Essential

• Experience of vulnerability assessments/management.
• Experience of operating systems and application security with respect to hardening.
• Experience of being involved in the investigation and remediation of IT security/cyber incidents.
• Previous involvement in cyber compliance activities, including both internal/external audits and assessments.
• Experience of cyber incident response.
• Experience of cyber risk assessment.
• Experience of working at a senior management level.
• Experience of infrastructure security including virtual environments and cloud solutions.

Desirable

• Experience of working within the NHS or public sector organisation.
• Experience of working in a Cyber Security Manager or similar role in a complex organisation.

Additional Criteria

Essential

• Extensive experience of IT security management.
• Extensive knowledge of IT technical support in a large organisation.
• Expert knowledge of systems and networks.
• Able to demonstrate a track record of achievement at a senior level.
• Understanding of legislation and its impact on IT security & networking.
• Knowledge of Data Security and Protection Toolkit requirements.
• Working knowledge and practical application of core cyber security frameworks, i.e. ISO27001, CE+, CAF, DSPT, etc
• Excellent interpersonal and communication skills in dealing with a wide range of information technology users from skilled to non-technical.
• Able to set clear and appropriate priorities for self and others to meet overall goals.
• Leadership and motivational skills.
• Methodical and logical approach to problem solving.
• Strong negotiating and relationship building skills to gain maximum benefit for customers from software suppliers and internal IT providers.
• Ability to develop and maintain relationships internally within the Technology team, throughout the wider Trust and additionally with various eternal stakeholders.

Desirable

• Senior level experience of working across NHS bodies with demonstrable achievements.

Employer details

Employer name

Southern Health NHS Foundation Trust

Address

Moorgreen Hospital

Botley Road, West End

Southampton

Hampshire

SO30 3JB

Any attachments will be accessible after you click to apply.

348-CORP-5339