Information Security Manager - Digital

The Role

To provide leadership юҡ technical direction and guidance on matters of Cyber / Information Security Governance, Risks/Issues, Technical Controls, Procedures, best practice and Standards. To ensure that NHS Lanarkshire achieves and maintains the assurance standards provided by Network and Information Security Regulation and Data Protection legislation. To be lead assessor for all Cyber Security Digital IT controls for NHS Lanarkshire and to collaborate with partner organisations/agencies on a range of complex and sensitive security issues providing expert specialist advice on Information and Cyber Security to other IT Professionals, Clinicians and all staff in NHS Lanarkshire.

To assist and advise the Head of Information Governance and Director of Digital on ensuring that NHS Lanarkshire Information Security Policies, Procedures, Active Cyber Defence Tools and Configurations are mitigating the Cyber Security Operational Risks, are following National Guidance, reflect the latest Good Practice for the Digital Estate, and aligns with the IT / Cyber Security industry.

Additionally to work with our Enterprise Architect to ensure that NHS Lanarkshire’s security architecture and framework is appropriate and relevant to NHS Lanarkshire’s stated cyber security needs and objectives.

Have you always wanted to work with NHS Lanarkshire? Then this might be the opportunity for you to join Team Lanarkshire!

Here at NHS Lanarkshire, we put the patient at the heart of everything we do. Each colleague within the organisation plays a key role in how we deliver our healthcare services.

We proudly serve a population of 655,000 across rural and urban communities in bothinders North and South Lanarkshire. NHS Lanarkshire is comprised of Acute Services (which currently provide hospital based services over 3 main sites), Corporate & Property & Support Services, North and South Lanarkshire Health and Social Care Partnerships which provide integrated primary healthcare and social care services to local communities and surrounding areas.

• Relevant and extensive IT experience gained through working within an IM&T setting at a senior level, in the areas of IT Infrastructure and or Applications management.
• Graduate or equivalent level qualification in Cyber Security or extensive experience within an Information Security role and an industry standard qualification preferred e.g. CISM, CISSP.
• Excellent analytical and technical skills.
• Hands‑on experience in IT project management with formal processes.
• Must have sound experience in the architecture design and the operations of the high availability environment.
• Broad knowledge of the trends in technologies and the applicability of these 8 technologies.
• Ability to quickly digest new technologies.
• Ability to communicate well with both technical and non‑technical staff.
• Ability to determine and advise on the alignment of emerging technologies with the business objectives.
• Experience of creating or maintaining an Information Security Management System (ISMS).
• Strong change management skills, including team leading experience.
• Knowledge of incident response and analysis, along with experience and awareness of the business issues in the NHS.
• Demonstrable experience of managing Information/cyber security applications and risks in a related area either in NHS, service industries or commerce.
• Experience of staff management/leadership.
• Evidence of Continuing Personal Development.
• Experience of procurement of information systems and associated tender processes.
• Ability to influence others and develop and maintain effective working relationships with senior managers, clinicians, administration staff, Informatics staff and third party service providers.
• Excellent tangent, negotiation, facilitation and communication skills.
• Ability to understand, analyse and re‑engineer complex processes.
• Excellent organisational & time management skills.
• Ability to negotiate & influence change at all levels.
• Ability to understand, analyse & disseminate complex concepts to a wide range of staff with varying levels of technical understanding.

A driving licence is required, this…