Contracted Job Description – Cyber Security Advisor – Band 6 Recruitment role summary and candidate profile Additional narrative about the role About the team The Cyber Security Advisor provides an initial analysis on security data to identify potential threats and formulate recommendations and actions to consider to remediate and respond. They support senior colleagues in assessing, planning, and advising stakeholders on security measures that will help protect NHS Digital from security breaches and attacks on its computer networks and systems. The Cyber Security Advisor will either be placed in the Protective Monitoring, Incident Management, Threat Hunting or Threat Intelligence team within the Cyber Security Operations Centre (CSOC) depending on the skills and experience of the individual. Cyber Security Advisor – Band 6 Knowledge, Skills and Experience Essential Information Technology (IT) Security Policies (1) Knowledge of IT security policies, standards, and procedures; ability to utilise a variety of administrative skill sets and technical knowledge to ensure cyber security compliance. Information Security Management (2) Knowledge of the processes, tools and techniques of information security management, ability to deploy and monitor information security systems, as well as detect, resolve and prevent violations of IT security, to protect organisational data. Information Security Technologies (1) Knowledge of technologies and technology-based solutions dealing with information security issues; ability to apply these in protecting information security across the organisation. Information Assurance (1) Knowledge of and the ability to protect information and information systems while ensuring their confidentiality, integrity and availability. Digital Threat Management (2) Knowledge of techniques, approaches and processes of digital threats; ability to detect, monitor, analyse and prevent digital threats. Security Information and Event Management (SIEM) (1) Knowledge of concept, procedures and processes of Security Information and Event Management (SIEM); ability to utilise related applications to protect organisational networks from cyber risks. Intrusion Detection and Prevention (2) Knowledge of tools, techniques and processes of intrusion detection and prevention; ability to detect, resolve and prevent intrusion behaviours to protect organisational networks. Information Security Operation Centre (ISOC) (1) Knowledge of modules, processes and technologies of Information Security Operation Centre (ISOC); ability to detect, response and utilise related platform and applications to perform cyber security initiatives. Desirable Computer Crime (1) Knowledge of concepts, tools and practices of dealing with computer crime; ability to detect and prevent business crimes that involve computers/networks as instruments. Computer Network Defence (1) Knowledge of methods and processes to monitor, analyse and respond to network attacks, intrusions or any unauthorised actions; ability to use techniques and tools to perform network defence. Computer Forensics (1) Knowledge of technologies, methods and tools of forensics investigations for IT security violations or potential threats; ability to identify, uncover and evaluate violations, warning reports, suspected incidents and insidious events. Digital Forensic Tools (1) Knowledge of and ability to utilise a variety of specific tools for collecting, analysing, and presenting digital-related evidence. Penetration Testing (1) Knowledge of penetration testing concepts, approaches, and tools; ability to find vulnerabilities on network, mobile application, servers, operating system, etc. Qualifications Essential Post-graduate level degree or equivalent level of experience (3 years’ industry experience or apprenticeship in Cyber Security). Evidence of continuous professional development in Cyber Security. Desirable CompTIA Security+ Comptia Network+ CompTIA CySA+ (Cybersecurity Analyst) About the Benefits The Opportunities You’ll be part of a research-led team of digital and healthcare experts working to transform digital health and care. You’ll build up a strong portfolio of experience delivering with multidisciplinary teams. You will benefit from a real commitment to your personal and professional development. A twice yearly Performance Development Review process focuses upon your professional competencies and identifies opportunities for improvement. Our staff use the Civil Service Learning portal which allows access to the best training courses across government. The Terms and Conditions A competitive salary. Flexible working applications considered. Family friendly benefits. Annual leave starting at 27 days per annum plus statutory bank holidays rising to 33 days with service. An excellent contributory pension scheme. NHS Digital operates on a flexible assignment model allowing people to move between programmes and services to gain broader experience and delivery organisational priorities as such this role description is an initial assignment.