Principal Cyber Security Adviser

Principal Cyber Security Adviser role at NHS England

This role sits within the Joint Cyber Unit (JCU), a collaboration between the Department of Health and Social Care (DHSC) and NHS England (NHSE). The JCU is embedded within the Digital Policy Unit (DPU), a unit comprising both DHSC staff and NHSE staff intended to design, plan and build a digitally enabled, data driven and safe health and social care system with ministers and the NHS.

The purpose of the JCU is to provide strategic leadership in cyber security across the health and care sector, assure the cyber security of the sector, act as system stewards to improve cyber resilience across the health and care system and to provide advice which empowers health and care staff to share information appropriately and securely to deliver care.

The JCU sets, develops, and implements strategy, policy and standards for cyber security across the NHS and Adult Social Care in England. It has responsibility for designing, implementing and the ongoing assurance of the cyber security system risk management and compliance framework in place across the wider health and care system.

• Governance, Risk and Compliance – cyber and information governance, system engagement, system compliance, system supply chain, system risk management and internal JCU business operations.
• Strategy and Policy – development and implementation of national strategy, policy and regulation.

The Principal Cyber Security Adviser post sits within the Governance, Risk and Compliance division in the System Cyber Risk and Assurance function which is responsible for managing cyber risk across the health and care system, ensuring that we operate within the appetite set by both the NHSE and DHSC board.

• Provide expert level subject matter knowledge in the cyber security area from both a technical and a business perspective to advise on issues across the cyber security domain and all activity across the Joint Cyber Unit.
• Establish and oversee process for assessing cyber risk and advising proportionate national interventions, including funding and regulatory levers, across the system.
• Lead the development of risk assessments into flagged scenarios and make recommendations as to how risk is best managed, articulating recommendation verbally and in writing, potentially to senior audiences.
• Lead on the reporting to the National Chief Information Security Officer on system cyber risk through development and oversight of a system cyber risk scenario library, drawing on support from the cyber risk intelligence and cyber governance teams.

Our work supports the NHS to deliver high quality services for patients and best value for taxpayers.

Our staff bring expertise across hundreds of specialisms — including clinical, operational, commissioning, technology, data science, cyber security, software engineering, education, and commercial — enabling us to design and deliver high-quality NHS services.

• Enabling local systems and providers to improve the health of their people and patients and reduce health inequalities
• Making the NHS a great place to work, where our people can make a difference and achieve their potential
• Working collaboratively to ensure our healthcare workforce has the right knowledge, skills, values and behaviours to deliver accessible, compassionate care
• Optimising the use of digital technology, research, and innovation
• Delivering value for money

Earlier this year, the Government announced that NHS England will gradually merge with the Department of Health and Social Care, leading to full integration. The aim is to create a smaller, more strategic centre that reduces duplication and eliminates waste.

If successful at interview, we will initiate an Inter Authority Transfer (IAT) via the Electronic Staff Record (ESR). This retrieves key data from your current or previous NHS employer to support onboarding, including competency status, Continuous Service Dates (CSD), and annual leave entitlement. You may opt out at any stage of the recruitment process.

For further details / informal visits contact:
Name:
Karen Dempster

Job title:

Head of Strategic Business Management & Operations
Email address: e
Telephone number:

Mid-Senior level

Full-time

Information Technology

Hospitals and Health Care