Job summary
- Main area
- Cyber
- Grade
- 6
- Contract
- Permanent
- Hours
- Full time - 37.5 hours per week
- Job ref
- 311-H1017-26
- Employer
- Pennine Care NHS Foundation Trust
- Employer type
- NHS
- Site
- Pennine Care NHS Foundation Trust
- Town
- Ashton Under Lyne
- Salary
- £39,959 - £48,117 per annum
- Salary period
- Yearly
- Closing
- 22/06/2026 23:59
Employer heading
Cyber Security Engineer
6
If you are Kind, Fair, Ingenious and Determined then we want you to come and join our #PennineCarePeople
https://www.penninecare.nhs.uk/values
Job overview
The Cyber Security Engineer will play an important role in protecting the digital infrastructure and information assets of Pennine Care NHS Foundation Trust. The post holder will be responsible for the technical operation and continual improvement of cyber security controls, taking a proactive approach to cyber defence and supporting the ongoing maturity of the Trust’s security posture.
The role will involve monitoring, detecting, and responding to cyber security threats and vulnerabilities using a range of security tools, including endpoint protection, vulnerability management, threat prevention services, and network security controls. The Cyber Security Engineer will also analyse security data and contribute clear, meaningful reporting and recommendations to both technical and non-technical stakeholders.
The post holder will work closely with internal teams and third-party suppliers to ensure systems and services meet agreed security standards, while supporting risk management, audit activities, and compliance with NHS cyber security guidance. Ongoing professional development is essential, with the role requiring continued learning to remain effective against an evolving cyber threat landscape.
Main duties of the job
Provide expert cyber security advice on phishing, computer security and cyber-crime. Prioritise and triage tickets and alerts from national and local systems, escalating by severity.
Ensure compliance with frameworks including DSPT, Cyber Assurance, CareCERT, Cyber Essentials and NIS Regulations. Support completion of the Data Security and Protection Toolkit.
Lead penetration testing, vulnerability management and cyber risk assessments, developing mitigation strategies through analysis of complex and sensitive information.
Investigate security incidents using technical logs, threat intelligence, MITRE frameworks and known TTPs. Deliver incident response, recovery and reporting (e.g., ICO/NHS CSOC), ensuring lessons learned.
Deploy, maintain and troubleshoot systems including O365, SharePoint, email, security tools and platforms. Maintain anti-virus and ensure secure patching across infrastructure.
Develop and maintain SOPs, support control selection, risk assessments and gap analysis, contributing to a proactive, cost-effective and resilient service.
Provide training, supervision and specialist technical guidance. Support Digital Services with configuration and operational security.
Contribute to policy development (Data Security, Acceptable Use), interpret legislation and best practice, ensuring compliance with NHS Digital standards.
Manage competing priorities to meet deadlines and stay current on emerging threats, vulnerabilities and threat actors.
Working for our organisation
We are proud to provide high quality mental health and learning disability services, both inpatient and in the community across five boroughs of Greater Manchester - Bury, Oldham, Rochdale, Stockport and Tameside and Glossop.
Our vision is for a happier and more hopeful life for everyone in our communities and our staff work hard to deliver the very best care for the people who use our services. We’re really proud of our #PennineCarePeople and do everything we can to make sure we’re a great place to work.
All individuals regardless of race, age, disability, ethnicity, nationality, gender, gender reassignment, sexual orientation, religion or belief, marriage and civil partnership are encouraged to apply for this post. We would also encourage applications from individuals with a lived experience of mental illness, either individually or as a carer.
If you come and work for us we will offer a range of benefits and opportunities, including:
- Generous annual leave entitlement for Agenda for Change and Medical and Dental staff.
- Flexible working opportunities to support your work/life balance
- Access to Continued Professional Development
- Involvement in improvement and research activities
- Health and Wellbeing activities and access to an excellent staff wellbeing service
- Access to staff discounts across retail, leisure and travel
Detailed job description and main responsibilities
For the Detailed job description and main responsibilities, please see attached Job Description and Person Specification.
Person specification
Education / Qualifications
Essential criteria
- Degree level qualification relevant for the role or demonstrable equivalent level of experience.
- Specialist knowledge acquired through post graduate diploma level or equivalent experience.
Experience
Essential criteria
- Previous experience of working in the cyber security field.
- Previous experience of working to KPI’s/KRI’s.
Desirable criteria
- Previous experience of working in digital in the NHS or a healthcare setting.
Knowledge
Essential criteria
- Knowledge of digital best practice, information security and information governance.
- Working knowledge of control / assurance frameworks.
- Understanding of security categorisations, Digital Assessment Technology Criteria and DPIAs.
Skills & Abilities
Essential criteria
- Proven ability for attention to detail.
- Advanced keyboard skills and the ability to maintain systems.
- Able to use own judgement to work within broad processes and policies.
- Able to effectively evaluate multiple options to aid decision making.
- Able to compile a legal register
- Able to build relationships with ease, gaining trust and maintaining confidentiality.
- Excellent communication skills in order to convey technical digital / cyber issues to a non-technical digital / cyber audience.
- Work effectively as part of a team and manage others.
Applicant requirements
The postholder will have access to vulnerable people in the course of their normal duties and as such this post is subject to the Rehabilitation of Offenders Act 1974 (Exceptions) Order 1975 (Amendment) (England and Wales) Order 2020 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service to check for any previous criminal convictions.
Application numbers
Documents to download
Further details / informal visits contact
- Name
- Rizwan Majeed
- Job title
- ICT Security Manager
- Email address
- [email protected]
- Telephone number
- 01617161430
List jobs with Pennine Care NHS Foundation Trust in Administrative Services or all sectors



.jpg)