Cyber Security and Compliance Analyst

Job Overview Join Us in Transforming Healthcare Through Digital Innovation At BCUHB ICT, we’re on a mission to revolutionise patient care, outcomes through cutting‑edge technology and smarter ways of working. Our vision? To create a customer‑focused, innovation‑driven ICT service that delivers real value where it matters most. With our Digital Strategy we’re streamlining operations, optimising resources, and fostering a culture of collaboration and continuous improvement. This is your chance to be at the heart of a major transformation—leading or supporting game‑changing digital advancements in healthcare. Are you ready to take on the challenge? If you’re passionate about driving change and making an impact, we want to hear from you You’ll be joining the Cyber Security and Compliance Team, reporting to the Cyber Security and Resilience Manager, and be responsible for proactively monitoring and protecting the ICT Infrastructure from cyber threats, ensuring the resilience of systems which underpin critical patient services. Main Duties of the Job Provision of a virtual Security Operations Centre function, including monitoring and reviewing the Security Information & Event Management system and other controls. Proactive analysis and identification of suspicious/malicious activity. Evaluation of data for patterns and trends in incidents, ensuring corrective and preventative actions. Support the Cyber Security Awareness Programme, addressing Information Security Management System, Cyber Essentials, and NIS‑R requirements. Maintain up‑to‑date knowledge of cyber threats and apply this through threat hunting. Assist in developing and delivering monitoring systems to measure compliance with standards. Provide advice and guidance on ICT, Information, and Cyber Security queries, using available controls and technologies to balance user needs with system and information security. Experience Significant experience in a complex ICT environment, with relevant Cyber Security experience. Knowledge of complex ICT configuration, coding principles, structured query languages, system and OS logs, Windows technologies, and multi‑vendor environments. Skilled in troubleshooting complex technical issues. The ability to speak Welsh is desirable for this post; Welsh and/or English speakers are equally welcome to apply. Working for Our Organisation If you relish a challenge, have a passion to help others or simply fancy a fresh start, then Betsi Cadwaladr University Health Board (BCUHB) North Wales, has all the right ingredients. The largest health organisation in Wales, providing a full range of primary, community, mental health, acute and elective hospital services for a population of around 700,000, across North Wales. Join our team and get the support you need, in line with our Organisational Values and ‘Proud to Lead’ competence framework. Enjoy being part of working with engaged leadership at all levels, and be assured we are committed to promoting equality and diversity, and are proud to welcome applicants under the “Disability Confident Employer” scheme. Please check your email account regularly. Successful applicants will receive all recruitment related correspondence via the email account registered on the application form. Applications may be submitted in Welsh. Applications submitted in Welsh will not be treated less favourably than an application submitted in English. Description and Main Responsibilities Ability to discuss problems and work in conjunction with 3rd parties on fault resolution. Ability to assess potential cyber security threats, incidents and risks and identify actions to mitigate or eliminate them. Proven ability to analyse and appropriately present information so that it is easy to understand. Ability to use own initiative to analyse problems and propose solutions. Ability to carry out self‑initiated research into complex attack techniques, vectors and threats. Ability to influence, persuade and negotiate with staff at different levels. Sound judgement, decision making, and organisational skills. A broad range of ICT skills. Excellent communication skills. What We Can Offer You In Return Up to 34 days holiday entitlement plus bank holidays Generous employer pension contributions Agile and flexible working options Membership of the British Computer Society Car leasing options Cycle 2 Work scheme Person Specification Qualifications and Knowledge Educated to Degree level or equivalent experience. Evidence of Continual Professional Development Possesses a good working knowledge of multiple Systems and hardware platforms gained by experience and training. Demonstrates a good knowledge of NHS Wales and LHB information and communications technology standards and requirements. Hold a relevant training qualification - Level 3 Award in Education and Training (Previously known as PTTLS - Preparing to Teach in the Life Long Learning Sector) Desirable Criteria Recognised professional qualification in an electronic engineering/computing field such as MCSE, MCSP (Microsoft Certification), ITIL Foundation Knowledge in application management Professional body membership such as SDI, BCS or FedIP Knowledge of both local and national NHS ICT developments and strategies. Full knowledge of NHS IT security policies and procedures. Good knowledge of organisations goals and objectives. Change management Customer services management Experience Essential Criteria Experience of providing ICT support to Negotiated Service Level agreements in a hospital or large organisation environment. Problem identification and solving. Experience of working in an NHS/social care or voluntary sector setting. Participation in change management projects and process re‑engineering. Experience of supervising staff. Problem identification and solving Desirable Criteria Experience of staff supervision or management. Experience of liaising with senior managerial staff and clinical staff in the determination of their information technology needs. Experience of managing change. Aptitude and Abilities Essential Criteria Excellent Customer service Skills Ability to stay calm and communicate effectively in stressful situations. Ability to write and maintain technical reports, operational procedures and system documentation sets in an accurate, concise and clear manner. Must have advanced IT/Keyboard skills demonstrable across Microsoft Office Suite of applications. Ability to direct and conduct research into ICT issues, systems and products as required. Proven ability of minute taking Ability to effectively prioritise tasks in a high‑pressure environment. Ability and willingness to travel across the Health Board and broader if required. Ability to train and support staff. Conflict resolution skills Sound judgement, planning, decision making, and organisational skills Ability to work on own initiative and organise / prioritise own workload and that of the team to operate effectively Ability to train and support staff Desirable Criteria Ability to initiate and respond positively to change, and the ability to learn from experience. Values Essential Criteria Innovator Lateral Thinker Ability to communicate verbally with all levels of the organisation and able and willing to share information. Flexible and adaptable to meet all aspects of the work Time Management skills. Completer Finisher Advances people skills Other Essential Criteria Demonstrates keen attention to detail. Committed to a culture of continuous improvement and development – underpinned by open communications and collaboration. Appetite for hard work and challenges Show resilience, stamina and reliability under sustained pressure. High level of personal integrity Flexible in approach to try new procedures and practices Excellent customer service orientation. Flexible in approach to try new procedures and practices Seniority Level Mid‑Senior level Employment Type Full‑time Job Function Information Technology Industries Hospitals and Health Care #J-18808-Ljbffr