Cyber Security Analyst - Bicester
Full-time
Others
Bicester, OX26 6HR, England
2 weeks ago
Ensure the delivery of projects to achieve both CareCERT, Cyber Essentials and DSPT accreditation for the Trust and implement pro.....
Ensure the delivery of projects to achieve both CareCERT, Cyber Essentials and DSPT accreditation for the Trust and implement processes that assure ongoing maintenance of this status Provide support in the day-to-day management of information security and governance service provision to all users ensuring the Trusts compliance with the Data Protection Act 1998, Access to Health Records Act 1990, Freedom of Information Act and those regulations that supersede or supplement these from time to time To assist in the ISG continuous improvement work stream within the Digital Directorate that seeks to improve the Trusts operational management of Information Security and Information Governance Interpret highly complex legislation and regulations related to information governance and information security such as ISO/IEC 27001, the Data Protection Act 1998, NHS Information Risk Management, Computer Misuse Act and develop, implement, and enforce suitable and relevant information security policies and procedures across the Trust. To assist in ensuring all information systems and underlying technical architectures and changes to the technical environment are assessed against Information Security best practice to assure the Trust and external bodies that information held by the Trust is secure. Provide regular reports to the Head of Information Security and Governance on areas such as Project Progress, Security, in relation to upcoming threats, number of security incidents (detected and prevented) and compliance of ICT systems and equipment including patching levels. Provide support for Information Asset Owners (IAOs) through effective networking structures, sharing of relevant experience, provision of training and creation of information risk reporting structures, ensuring the completeness and accuracy of the Trusts information asset register. Assist in ensuring Digital staff are suitably trained and understand Digital Security including the generation and provision of IG and IS training at part of IG training, staff induction and specialist training sessions, such as for IAOs and IAAs (information Asset Administrators). Ensure that identified information threats and vulnerabilities are followed up for risk mitigation, and that perceived or actual information incidents are managed in accordance with NHS ISG requirements, leading on the assessment of all reported IG incidents Ensure the Trust responds to, and is protected against, all new threats identified within Information Security Notices and alerts (including those from CareCERT). Monitor Security systems for alerts and investigations
Official account of Jobstore.