Senior IT Security Engineer

£38,682.00 to £46,580.00 per year, £38682.00 - £46580.00 a year

Contract Type:

Permanent

Hours:

Full time

Disability Confident:

No

Closing Date:

20/03/2026

Responsible for a range Trust IT Security policy implementation and development shaping the trusts long term IT patching cycle, to ensure a seamless and consistent delivery of IT Services.

Assist in the translation of Trust Long term strategic plans, objectives and policy decisions into operational activity and provide feedback to ensure continuous quality improvements.

Maintain high awareness of developing standards and innovations in the area of IT Security, and under the guidance of the Head of IT Security ensure the trust exploit opportunities.

Both financial and technological as necessary to deliver optimal and cost-effective patient care.

Ensure services are supported to agreed hours of service to agreed service levels by participation within the on‑call rota.

This will require attendance on site for remedial or planned activities.

Act as an authority and provide specialist knowledge across the range of IT security procedures and practices, underpinned by theoretical knowledge and relevant practical experience.

For the Trust and ensure delivery of associated IT systems and services.

Work with stakeholders to ensure clear definition and agreement of service.

In particular, with relation to possible downtime during patch management.

Ensure these services are delivered and possible downtime communicated as necessary.

Conduct risk assessments as appropriate and advise the Trust on IT Security concerns.

Under the instruction of the Head of IT Security ensure IT Security risks are clearly identified, recorded, managed and directly communicated to IT Senior Management Team accordingly.

When required, liaise with external/third parties to ensure the Trusts IT Security stance is not compromised.

When completing agreed patching tasks.

With relevance to external systems or services being connected to the Trusts network.

Provide specialist knowledge as required or requested by other departments on the procurement of new solutions, systems or services to ensure they comply with the Trusts IT Security Strategy.

Work with the Heads of IT Services to ensure the IT systems and services are affordable and cost effective.

To contribute to the overall development of the Trust, to identify present and future opportunities, threats and risks in the IT environment with relation to IT security.

Promote effective use of IT systems and services, developing IT Security awareness and promoting a culture of IT Security.

Be responsible for managing and maintaining the various highly complex IT Security systems and services, as well as advising on future technologies, research and development.

Participate in continued professional development, training and courses as identified ensuring skills and knowledge are kept current.

Provide specialist knowledge and advice on the effective use of Trust IT Services to staff, including promotion of the use of IT Security Policies & IT Security awareness programs.

Identify staff IT Security knowledge gaps, develop and promote an IT Security awareness program in conjunction with other departments as required.

Assist the Head of IT Security to identify and develop quality measures to ensure the highest levels of service delivery are achieved.

Carry out complex projects pertinent to the work of the Trust under the direction of the Head of IT Security, assisting the production of management information, reports and recommendations.

Conduct vulnerability assessments and other associated activities as appropriate underpinned by theoretical knowledge and relevant practical experience. within the Trust to Identify, remediate and mitigate risks to the Trust.

Liaise with NHS England, NCSC and other relevant bodies as required ensuring IT Security advisories, directives and notifications are actioned and logged.

This includes but is not limited to threat & vulnerability alerts, vendor and other specialist threat intelligence feeds.

Ensure all systems and applications where applicable are kept up to date and are encompassed in the patch management routine…