Cyber Security Engineer

The Christie NHS Foundation Trust, a world‑renowned cancer centre, are seeking an experienced and skilled Cyber Security Analyst (Band
6) to work with us.

As a Cyber Security Analyst at The Christie, your main duties will encompass a range of responsibilities crucial to protecting our digital infrastructure, and data. You will play a key role in administering and optimising our cyber security toolset, which includes antivirus solutions, vulnerability scanners, and threat protection services. Your proactive approach will ensure that all cyber security tools are configured according to best practices and compliant with NHS guidelines.

Continuous monitoring of the Trust’s cyber and security systems is a fundamental part of your role, where you will detect, analyse, and respond to any cyber security incidents or breaches. This includes managing the incident response process, documenting actions taken, and reporting findings to minimise the impact on our operations. You will also assess and manage the cyber security risks associated with our IT systems, ensuring compliance with legal and regulatory requirements such as GDPR.

CAF/DSPT.

In addition to these technical duties, you will maintain the Trust's risk register and prepare comprehensive reports on our cyber security posture. Effective communication with both internal and external stakeholders is essential to raise awareness about cyber security issues and strategies.

You will provide regular updates to senior management and non‑technical staff, ensuring they are informed about critical security matters and preventive measures.

Collaboration is key in this role, as you will work closely with various Digital Services teams to design and implement system enhancements that strengthen our cyber security defences. You will also participate in security projects, ensuring they align with our strategic goals and IT infrastructure developments.

Your involvement in internal and external audits related to IT security will help ensure adherence to security policies and procedures.

Our Digital team ethics are built on the foundation of trust, respect, and open communication. We recognise the value of diverse perspectives and encourage all team members to share their ideas and knowledge. By actively listening to each other and engaging in constructive dialogue, we foster a culture of continuous learning and growth, enabling us to stay agile and adapt to the ever‑changing landscape of healthcare and technology.

Teamwork is a vital aspect of our working culture, as we understand that collaboration often leads to more effective problem‑solving and higher‑quality outcomes. We encourage our team members to work together, share responsibilities, and leverage each other's strengths to achieve our collective goals. This spirit of cooperation not only enhances our overall performance but also creates a sense of camaraderie and belonging among team members.

We are committed to maintaining a working environment that prioritises the well‑being and professional development of our team, by providing access to resources, training, and mentorship, we invest in our team members' growth and empower them to reach their full potential. We also strive to maintain a healthy work‑life balance, recognising that personal well‑being is essential to sustained professional success.

• Administer and optimise the use of the Trust's cybersecurity toolset, which includes antivirus software, vulnerability scanners, SIEM systems, threat protection services, and patch management solutions.
• Ensure that all cybersecurity tools are configured according to best practices and compliant with NHS guidelines and standards.
• Conduct continuous monitoring of the Trust’s IT systems to detect, analyse, and respond to cybersecurity incidents and breaches.
• Manage the incident response process, including documentation and reporting, to mitigate risks and minimise the impact of security breaches.
• Assess and manage cybersecurity risks associated with IT systems and operations.
• To manage, maintain, and update firewall rules in line with security best practice and ITIL change management.
• Ensure…