Information Security Specialist

2 months ago


Newcastle upon Tyne, United Kingdom NHS Business Services Authority Full time

We're looking for an organised and motivated Information Security Management professional to join us and play a key role in delivering the information security compliance programme across all services within the NHS Business Services Authority (NHSBSA).

The role will be based in the NHSBSA’s Security & Information Governance Team located at our Stella House office, Newcastle upon Tyne. In line with our hybrid working policy there is also an opportunity for working from home to be considered providing business needs are met.

So, if you are excited by the above, feel you have what it takes to be successful, and would like to join our dynamic team we would love to hear from you.

What do we offer?
- 27 days leave (increasing with length of service) plus 8 bank holidays
- Flexible working (we are happy to discuss options such as compressed hours)
- Flexi time
- Hybrid working model (we are currently working largely remotely)
- Career development
- Active wellbeing and inclusion networks
- Excellent pension
- NHS Car lease scheme
- Access to a wide range of benefits and high street discounts

Actively supporting the continual improvement of the organisation’s arrangements for information security management you will work with relevant stakeholders and interested parties (such as special interest groups, professional associations and security forums) to understand the information security threat landscape, trends, and emerging risks.

Here at the NHS Business Services Authority (NHSBSA), what we do matters.

 We manage the NHS Pension scheme, process prescription payments and much more. Our services are used by NHS organisations, contractors and the public: we take pride in being part of something so meaningful, that touches millions of lives.

 Just as we design our services around the needs of our customers, we place our people at the heart of our organisation. That’s why when you join us, you’ll be empowered and given the right support to help your career grow.

 As one of the UK’s Best Big Companies to work for, we’re all connected to our values: Collaborative, Adventurous, Reliable and Energetic. We care about our people, our purpose, and your progress.

We strive to offer a fantastic colleague experience, where every voice is heard, and every colleague is supported and respected. Wellbeing, diversity and inclusion is at the centre of this, so when you join us, you can connect with our Lived Experience Networks who help us to bring our authentic selves to work.

We are people connected to care.

**In this role you are responsible for**:

- Understanding and employing a scenario-based approach to information risk assessment.
- Undertaking information security risk assessments in line with the approved NHSBSA risk management framework, ensuring effective and timely engagement with key stakeholders including Cyber Security Team, Information Governance Team and Information Asset Administrators.
- Engaging with senior management (SIRO and Information Asset Owners) to ensure that they understand the information security risks relevant to their service area and to the organisation as a whole.
- Co-ordinating the identification of suitable information security risk treatment options.
- Managing the development and delivery of the information security education, training and awareness programme.
- Delivering information security management awareness training for all levels of the organisation, including online and face-to-face sessions.
- Providing information security support, advice and guidance to all NHSBSA teams.
- Establishing information security management arrangements for new services / programmes / projects - ensuring that information security controls reflect best practice and are embedded within processes and procedures.
- Managing the information security incident management process ensuring that remediation actions are taken in a timely manner and that lessons learned inform the security improvement plan.
- Scoping and conducting information security internal audits in accordance with the ISMS internal audit schedule.
- Using credible and reliable information and information sources to provide evidence of emerging information security threats.
- Maintaining a sound knowledge of information security products, systems and procedures used within the NHSBSA.

**Responsible to**: Information Security & Business Continuity Manager

**Key relationship**: Head of Security & Information Governance, Senior Information Risk Owner, Cyber Security Operations Manager, Business Continuity Specialist, Information Security Compliance Specialist, Information Governance Manager, Information Asset Owners



  • Newcastle upon Tyne, United Kingdom NHS Business Services Authority Full time

    Providing information security support, advice and guidance to all NHSBSA teams. Establishing information security management arrangements for new services / programmes / projects ensuring that information security controls reflect best practice and are embedded within processes and procedures. Managing the information security incident management process...


  • Newcastle upon Tyne, United Kingdom Initialize Full time

    Information Security Specialists - Newcastle/hybrid - global programme - £50 - 65k + benefits This prestigious client is setting a global Information Security Team, there are multiple roles and candidates will have 2-4 years Information Security and ideally experience in of the below or more areas: Learning and Development Specialist is a key contributor to...


  • Newcastle upon Tyne, United Kingdom NHS Counter Fraud Authority Full time

    Work with the Information & Cyber Security Manager and team to actively manage, review, and develop systems and processes to ensure the security of the NHSCFA ICT infrastructure and information systems. Develop and support a range of cyber security products and services and proactively assess, investigate, and mitigate risks and vulnerabilities in ICT...


  • Newcastle upon Tyne, United Kingdom NHS Business Services Authority Full time

    Fixed term 12 month - Are you passionate about Information Governance? We're looking for an organised and motivated Information Governance Specialist to join us and play a key role to ensure our organisation is doing the right thing with our data, especially patient and other personal data. The role will be based in the NHSBSA's Security & Information...


  • Newcastle upon Tyne, United Kingdom NHS Business Services Authority Full time

    Are you passionate about Information Governance? We're looking foran organised and motivated Information Governance Specialist to join us and play a key role to ensure our organisation is doing the right thing with our data, especially patient and other personal data. The role will be based in the NHSBSA's Security & Information Governance Team and will be...


  • Newcastle upon Tyne, United Kingdom Nigel Wright Group Full time

    The Opportunity Fantastic opportunity for an experienced Information Security professional to take the lead on this national business's Information Security activities. The company operates a fully flexible hybrid working policy where on average the person will be onsite 2 days per week. The Role Leading a small team, you will be responsible for...


  • Newcastle upon Tyne, United Kingdom Homes England Full time

    **Information Security Officer**: **This opportunity is a fixed term contract or secondment opportunity for 2 years.** Closing Date: 01/12/2023 Interviews will take place on 12/12/2023 and 13/12/2023 **A bit about the role...**: Working in a small team with the Senior Information Security Officer, the Information Security Officer will play an essential...


  • Newcastle upon Tyne, United Kingdom Reed Full time

    A private TechForGood business in the North East is going through a process of global expansion and is looking for a Head of Information Security to drive excellence across security practices. You will be responsible for ensuring that the software and applications that the clients are onboarded onto are secure and compliant. You will have a focus on the...


  • Newcastle upon Tyne, United Kingdom Reed Full time

    A private TechForGood business in the North East is going through a process of global expansion and is looking for a Head of Information Security to drive excellence across security practices. You will be responsible for ensuring that the software and applications that the clients are onboarded onto are secure and compliant. You will have a focus on the...


  • Newcastle upon Tyne, United Kingdom Reed Full time

    A private TechForGood business in the North East is going through a process of global expansion and is looking for a Head of Information Security to drive excellence across security practices. You will be responsible for ensuring that the software and applications that the clients are onboarded onto are secure and compliant. You will have a focus on the...


  • Newcastle upon Tyne, United Kingdom Reed Full time

    A private TechForGood business in the North East is going through a process of global expansion and is looking for a Head of Information Security to drive excellence across security practices. You will be responsible for ensuring that the software and applications that the clients are onboarded onto are secure and compliant. You will have a focus on the...


  • Newcastle upon Tyne, United Kingdom NHS Business Services Authority Full time

    Are you passionate about Information Governance? We're looking for an organised and motivated Information Governance Specialist to join us and play a key role to ensure our organisation is doing the right thing with our data, especially patient and other personal data. The role will be based in the NHSBSA’s Security & Information Governance Team and will...


  • Newcastle upon Tyne, United Kingdom Reed Full time

    A private TechForGood business in the North East is going through a process of global expansion and is looking for a Head of Information Security to drive excellence across security practices. You will be responsible for ensuring that the software and applications that the clients are onboarded onto are secure and compliant. You will have a focus on the...


  • Newcastle upon Tyne, United Kingdom Reed Full time

    A private TechForGood business in the North East is going through a process of global expansion and is looking for a Head of Information Security to drive excellence across security practices. You will be responsible for ensuring that the software and applications that the clients are onboarded onto are secure and compliant. You will have a focus on the...


  • Newcastle upon Tyne, United Kingdom Northumbria Healthcare - NHCT Northumbria Healthcare NHS Foundation Trust Full time

    At the heart of Northumbria Healthcare NHS Foundation Trust’s ambitious Digital Strategy is the provision of high-quality data to support intelligence-led decision making. This role is key to the delivery of this element of the strategy through the use of the latest analytical techniques that turn data into innovative, compelling and intuitive...


  • Newcastle Upon Tyne, United Kingdom Nigel Wright Full time

    **The Opportunity** An exciting opportunity has arisen for an experienced and passionate Information Security professional to join this rapidly growing tech company. Leading and shaping the company's security roadmap, you'll ensure the business remains vigilant to, and ahead of,the ever-changing threats, meeting the increasing demand to protect its data and...


  • Newcastle Upon Tyne, United Kingdom Careers In Group Full time

    **The Opportunity**An exciting opportunity has arisen for an experienced and passionate Information Security professional to join this rapidly growing tech company. Leading and shaping the company's security roadmap, you'll ensure the business remainsvigilant to, and ahead of, the ever-changing threats, meeting the increasing demand to protect its data and...


  • Newcastle Upon Tyne, United Kingdom Careers In Group Full time

    **The Opportunity**An exciting opportunity has arisen for an experienced and passionate Information Security professional to join this rapidly growing tech company. Leading and shaping the company's security roadmap, you'll ensure the business remainsvigilant to, and ahead of, the ever-changing threats, meeting the increasing demand to protect its data and...


  • Newcastle upon Tyne, United Kingdom Set2Recruit Full time

    Information Security Goverence, Risk and Controls Officer/Information Security ManagerReporting into CISO.Small Ethical Financial Services Insurance group (Member owned) 100% remote role£70,000K Salary + benefits + Bonus + Excellent Pension/Healthcare/Holidays etcOur client is expanding their Information Security group with a wider range of new projectsand...


  • Newcastle upon Tyne, United Kingdom Reed Full time

    The company: A private TechForGood business in the North East is going through a process of global expansion and is looking for a Head of Information Security to drive excellence across security practices. Over the past 4 years, they have grown from a team of 20 to 250 and have quadrupled their profits. They work across a range of practices within a...