Job Summary
Join us in this role at the NCA and be at the forefront of protecting the organisation from ever-evolving cyber threats. You’ll partner closely with the Head of Cyber Security Operations, shaping the organisation’s cybersecurity strategy and leading the charge in ensuring its successful execution. You’ll be the driving force behind identifying potential risks, stopping cyber-attacks in their tracks, and securing sensitive information across NCA facilities.
Your expertise in web and email security, firewalls, and antivirus protocols will be integral to safeguarding NCA’s digital infrastructure. Working with senior leadership, you’ll craft cybersecurity policies and ensure every layer of security aligns with the latest industry best practices, while keeping NCA’s critical services running smoothly.
You’ll lead the investigation of security incidents, oversee vulnerability assessments and penetration tests, and continually innovate security measures to stay ahead of the curve. Working hand-in-hand with cross-functional teams, you’ll not only minimise disruptions but also play a key part in ensuring uninterrupted patient care.
As a seasoned expert, you’ll guide and inspire a team of talented cyber professionals, fostering an environment where growth, learning, and excellence are the norm. By leveraging your leadership skills, you’ll help build a high-performing team that’s as passionate about cybersecurity as you are, all while driving the NCA towards its goals.
Main duties of the job
Continuously monitor network activity for signs of malicious activity or security breaches. Utilise security information and tools for real-time alerts and analysis.Lead or assist in responding to security incidents, identifying the cause, and mitigating risks. Perform forensic investigations to analyse security incidents and recommend preventive measures. Conduct regular vulnerability scans and penetration tests to identify weaknesses in the system. Prioritise vulnerabilities based on their risk and potential impact on the business, and coordinate remediation efforts. Stay informed of evolving threats and recommend adjustments to risk management strategies. Provide guidance and training to staff on best practices in cyber security to prevent human-related security breaches. Evaluate, configure, and maintain security technologies, such as firewalls, intrusion detection/prevention systems (IDS/IPS), antivirus, and endpoint protection solutions. Collaborate with other IT and security teams to design and implement robust security controls. Report security metrics and incidents to senior management, providing recommendations for improvement. Ensure the organisation complies with applicable data protection laws and regulations, such as GDPR and NHS DSPT. Support internal and external audits related to cyber security.Share threat intelligence with the security team to inform proactive defence strategies.
Person Specification
Qualifications
Essential
- Relevant degree level (or equivalent) or ability to demonstrate equivalent knowledge, skills and experience.
- Relevant high level subject matter qualification e.g., CISSP, CCSP, CISM, CompTIA Cyber Security Analyst or equivalent knowledge, skills, and experience.
- Evidence of continued professional development
Desirable
- ILM Qualification
- ITIL Qualification
- Project Management Qualification (Prince2, SCRUM, etc)
Knowledge, Training & Experience
Essential
- Able to identify and resolve complex issues and problems across a broad range of IT solutions to an advanced level.
- Advanced knowledge of a broad range of IT solutions, including PC/Server operating systems, applications and hardware solutions
- Able to evaluate and define use of new IT solutions through research and development and build of test configurations.
- Significant relevant experience gained in a high-pressure IT Support environment.
- Significant experience of delivering, supporting and troubleshooting complex multi-vendor technical infrastructures
- In depth experience of major corporate solutions including the Microsoft server product set, VMware, and industry standard network technologies and architectures.
- Some knowledge of common alternative subject matter systems such as Unix, Linux, OS X.
- Proven ability to develop and deliver strategic plans.
Skills & Abilities
Essential
- Ability to coach and mentor staff to develop their technical skills and experience.
- Able to work on own initiative.
- Works well as part of a team.
- Is self-motivated and able to motivate others in the team.
- Flexible approach to work
- Excellent interpersonal skills.
- Proven ability to work to critical deadlines and to effectively prioritise workload.
- Excellent interpersonal skills able to engage and build effective relationships at all levels in stakeholder organisations.
- Ability to present to large groups of people.
- Advanced and accurate keyboard skills
- Ability to travel within the requirements of the post, including transporting appropriate equipment when required.
- Requirement to deal with complaints from staff who at times may be angry/frustrated and to deal with aggressive users in a calm and sympathetic manner to diffuse the situation.
- Be able to update staff/system users with bad news relating to system failures/data loss.
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).
From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).
Closing Date: 21 January 2025
