Skip to main content

This site is independent of the NHS and the Department of Health.

Please wait, loading

Job summary

Main area
IT
Grade
Band 7
Contract
Permanent
Hours
  • Full time
  • Flexible working
37.5 hours per week
Job ref
025-AC119-0625
Employer
Digital Health and Care Wales
Employer type
NHS
Site
Hybrid working
Town
Location to be confirmed at interview
Salary
£46,840 - £53,602 per annum
Salary period
Yearly
Closing
18/06/2025 23:59

Employer heading

Digital Health and Care Wales logo

Security Specialist Design

Band 7

Digital Health and Care Wales is an ambitious organisation created by Welsh Government to lead on the digital transformation of health and care. It builds on the digital architecture and national services put in place by the NHS Wales Informatics Service over the past decade.

The organisation will lead on large-scale developments that make a significant difference to the people of Wales as well as to health and care professionals, such as expansion of the digital patient record and the creation of a National Data Resource. It will improve the way data is collected, shared and used. Please check your email account regularly. Successful applicants will receive all recruitment related correspondence via the email account registered on the application form.

All applicants are invited to apply in Welsh, any application submitted in Welsh will not be treated less favourably than an application made in English.

Please be advised that there is a temporary top up for Bands 2 and 3 to reflect the incorporation of the top up to the living wage of £12.60 per hour - £24,638 per annum.

This temporary top up will be in place until the annual pay uplift for 2025/26 is confirmed

Job overview

The Cyber Security team are looking to recruit a specialist to join the team and work alongside lead roles and team members, in order to assist with the design, development & assurance of new services 

What we are looking for 

We are seeking candidates with the commitment, experience, skills and knowledge to provide the necessary level of cyber security involvement for services across NHS Wales. Candidates must be capable of managing the robust and consistent design and assurance required to support the delivery new digital services. Experienced in managing the delivery and provision of cyber security services within a large and complex organisation, you will have excellent planning and organization skills, coupled with practical knowledge of risk management methodology. An exceptional communicator, you shall be expected to establish working relationships with staff at all levels within DHCW, including clinicians and the wider user community. 

Main duties of the job

As a specialist, you will primarily be responsibility for the workstream within the national assurance group, ensuring that all proposals receive a thorough review to identify all necessary cyber security activities and are fully integrated within the internal risk management process. 

This role will also be responsible for ensuring the correct implementation of the cyber security strategies to enhance the protection of critical national infrastructure and clinically critical applications. Working closely with stakeholders at all levels within local Health Boards / Trusts, other public sector organisations in Wales, and security professionals throughout the UK in order to ensure that our systems are positioned to proactively identify, respond, recover and ultimately defend against Cyber related threats. 

Working for our organisation

Digital Health and Care Wales (DHCW) is an expert national body and part of NHS Wales. We work in partnership with NHS Wales colleagues and other key stakeholders to provide national digital and data services which support the delivery of health and social care in Wales. Modern health and care services depend on good digital tools, data and information. DHCW runs or works with more than 100 services and delivers major national digital transformation programmes to support this. In addition, DHCW provides expert advice in relation to cyber security and information governance. We give frontline staff the digital tools which help them provide safer and more efficient care. We are also giving patients and the public digital tools to better manage their own health and wellbeing, empowering people to live healthier lives. We put people at the heart of what we do, working to the highest standards to deliver quality and make digital a force for good in health and care. 

Working for DHCW offers lots of employee benefits, including flexible working, a competitive salary, 28 days of annual leave plus Bank Holidays and opportunities for career development. We are committed to recognising and celebrating our staff as the most valuable part of our organisation. 

Detailed job description and main responsibilities

You will be able to find a full Job description and Person Specification attached within the supporting documents or please click “Apply now” to view in Trac

We are looking for candidates who can demonstrate proven experience and strong skills in the following areas: 

  • A good understand of cyber security design process and have the ability to take a structured approach when reviewing system design. 

  • A strong technical background - including networking, computing, software development, systems integration and compliance frameworks. 

  • Formal qualifications in cyber security. 

  • An understanding of malicious attack processes along with the ability to verify services for vulnerabilities that might allow those attack to be achieved. 

  • Good verbal and written communications skills and must understand when to escalate concerns to line manager. 

  • The ability to work to very tight deadlines and work proactively under pressure 

  • Deliver projects and work packages against individual and team Key Performance Indicators 

  • Proven ability to manage large scale Cyber Security projects, and appropriate communications 

  • A good understanding of best practice security controls for market leading technologies 

  • Must be keen and proactive and able to work on your own initiative. 

     

Person specification

Qualifications and Knowledge

Essential criteria
  • Educated to degree level (or equivalent qualification / experience) in an associated professional field
  • Technical knowledge of application and network security.
Desirable criteria
  • Registered with a relevant informatics professional body
  • FEDIP Practitioner, or equivalent recognised Intermediate level Professional qualification.

Experience

Essential criteria
  • Experience of conducing Cyber reviews of IT systems.
  • Experience of producing risk reports to a hight level and delivering them to project teams.
Desirable criteria
  • A clear understanding and appreciation of NHS Wales’ national infrastructure and organisational structures.
  • Experience of working in an NHS/Healthcare or Public Sector environment

Skills and Attributes

Essential criteria
  • Excellent communication and interpersonal skills when dealing with highly technical and complex information to a wide range of stakeholders across organisational boundaries.
  • Confident in dealing with and resolving scenarios where people’s opinions may conflict.
Desirable criteria
  • Welsh language skills at level 1, or above

Employer certification / accreditation badges

Apprenticeships logoAge positiveWork With Me - A commitment to becoming a more inclusive business for disabled peopleGold Award for Corporate Health StrategyImproving working livesStop Smoking Wales is the NHS Smoking Cessation Service in WalesGood Recruitment CollectiveStonewall Hyrwyddwr Amrywiaeth Diversity ChampionMindful employer.  Being positive about mental health.CTP The Ministry of Defence partnering with Right ManagementDisability confident employerRemploy CymruThe University of Wales Trinity Saint David - Prifysgol Cymru Y Drindod Dewi SantThe Poppy FactoryDying to Work CharterThe Chartered Institute for IT - Reward the professionalism of your team, define and accelerate career paths, and recognise your organisation’s commitment to advancing technology.Federation for Informatics Professionals - A collaboration between the leading professional bodies in health and care informatics supporting the development of the informatics profession.Armed Forces CovenantEmployer pledge demonstrating a commitment to change how we think and act about mental healthCore principles

Applicant requirements

Welsh language skills are desirable

Documents to download

Apply online now

Further details / informal visits contact

Name
Andy Shanahan
Job title
Cyber Assurance Lead
Email address
[email protected]
Apply online nowAlert me to similar vacancies