Cyber Security Analyst

Main duties of the job

• Provide expert guidance on the selection, design, justification, implementation and operation of Cyber Security strategies, technologies, processes, procedures and standards.
• Support the development of controls and management approaches to maintain the safety, confidentiality, integrity, availability and security of the Trust's digital infrastructure and systems; including the protection of Trust and patient data and information stored and processed by infrastructure or systems managed by, or under the control of the Trust.
• As the Cyber Security Analyst, you will ensure that technology, infrastructure, systems and supporting processes possess adequate and cost-effective protection against cyber threats and all identified Cyber Security risks.
• Provide expert advice on, and management of, the Trust's defence against cyber threats, data breaches and Cyber Security technologies.

About us

Diversity makes us interesting... Inclusion is what will make us outstanding.
Inequality exists and the journey to eliminate it is not easy. Every step we take will be a purposeful step forward to deliver a truly inclusive culture where all our people are enabled to deliver outstanding care, where background is no barrier, and where everyone can be their authentic self and we truly represent our patient community.
We are committed to equal opportunities and welcome applications from all sections of the community, regardless of any protected characteristics. Reasonable adjustments will be made for disabled applicants where possible. All applicants who have a disability and meet the minimum criteria for the post can opt for a guaranteed interview.
If you need additional help with your application please get in touch by calling the recruitment team on [contact hidden] or [contact hidden].

Details

• Date posted: 06 May 2026
• Pay scheme: Agenda for change
• Band: Band 7
• Salary: £49,387 to £56,515 a year
• Contract: Permanent
• Working pattern: Full-time
• Reference number: 193-7760527CORB7-CSA
• Job locations: [Employer hidden — sign up to reveal], Princes House, London Road, Reading, RG1 5UZ

Job responsibilities

• Support the CISO in developing, implementing and monitoring a strategic, comprehensive cyber, enterprise information security, resilience, information governance and IT risk management strategy and plan.
• Provide expert cyber security advice to senior stakeholders and technical teams across the organisation.
• Work directly with key stakeholders to facilitate risk assessment and risk management processes.
• Collaborate with all departments within the Trust (and ICS) where necessary to identify and disseminate high-quality information that facilitates effective cyber and information security management and improvement.
• Use advanced analytic tools to determine emerging threat patterns and vulnerabilities.
• Scoping and delivery of penetration tests and ensure actions from vulnerability assessments are resolved.
• Lead on audit and audit preparation relating to IT security.
• Maintaining compliance with various standards in place e.g. Data Security and Protection Toolkit, CareCERT, Cyber Essentials+, Network and Information Systems Regulations etc.
• Act as the Trusts advisor on cyber security protection, detection, response and recovery.
• Analyse complex data and oversee the production of detailed information.
• Work closely with the Emergency Preparedness, Resilience and Response teams to ensure that preparations include events relating to cyber security.
• Evaluate options and be able to persuade and influence others to ensure that risks in relation to cyber, resilience and information integrity and security are addressed appropriately.
• Assist with the development of disaster recovery and business continuity strategies for Trust digital services, wider stakeholders and partner organisations.
• Perform security reviews, audits and risk assessment.

Person Specification

Qualifications

• ITIL v3 Service Management Qualification
• Educated to degree level or equivalent
• Formal certification (ISACA: Certified Information Security Manager (CISM). CISSP, or CRISC) and/or formal training in information security standards and best practice (e.g.: ISO 27001/2, COBIT), or equivalent work experience demonstrating understanding of the same.

Experience

• Extensive experience of developing and delivering an Information Security service to a large complex organisation using confidential and/or sensitive information (Essential)
• IT experience gained in both and Acute and Community setting (Desirable)

Additional information

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.

Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website.
From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here.

Employer details

• Employer name: [Employer hidden — sign up to reveal]
• Address: [Employer hidden — sign up to reveal], Princes House, London Road, Reading, RG1 5UZ
• Employer's website: [Employer hidden — sign up to reveal]

Employer contact details

• For questions about the job, contact: Associate Director of Operations, Eghosa Bazuaye
• Email: [Employer hidden — sign up to reveal]
• Phone: [contact hidden]