Job summary
An exciting opportunity has become available for a Senior IT Security Engineer to join our well‑established team. The successful applicant will be responsible for Trust IT Security policy implementation and development, shaping the Trust’s long‑term IT patching cycle and ensuring a seamless and consistent delivery of IT services.
Job responsibilities
- Implement and develop Trust IT Security policies and drive the long‑term patching cycle.
- Translate Trust long‑term strategic plans and policy decisions into operational activity, providing feedback for continuous improvement.
- Maintain awareness of evolving IT security standards and technologies, exploiting opportunities to improve service quality and cost efficiency.
- Support services to agreed service levels by participating in the on‑call rota; this includes attending on‑site remedial or planned activities.
- Act as an authority on IT security procedures and practices, providing specialist knowledge across the organisation.
- Work with stakeholders to define, agree on, and communicate service downtime during patch management.
- Conduct risk assessments, manage and communicate IT security risks to senior management.
- Liaise with external partners to protect the Trust’s IT security posture.
- Provide specialist knowledge for procurement of new solutions, ensuring compliance with the Trust’s IT Security strategy.
- Collaborate with Heads of IT Services to ensure systems and services are cost‑effective.
- Promote IT security awareness and foster a culture of security within the Trust.
- Manage complex IT security systems and advise on future technologies, research, and development.
- Engage in professional development, training, and course work to keep skills current.
- Develop and deliver briefing sessions on developments in the field.
- Lead investigations of IT security issues, using analytical and judgemental skills.
- Assist in producing management information, reports, and recommendations for complex projects.
- Support the development and maintenance of an Incident Response Plan and Computer Emergency Response Team.
- Travel to other Trust sites as required; own vehicle and full clean UK driving licence necessary.
Qualifications
- Substantial experience in an IT role that includes IT security responsibilities.
- Experience with a range of security technologies from different vendors (e.g., Tenable, Nessus, Microsoft XDR, Forcepoint).
- Achievement, or evidence of progress toward, recognized IT security qualifications such as CISMP, CISSP, CASP.
- Evidence of continuing professional development.
Skills and Knowledge
- Full UK driving licence.
- Knowledge of NHS IT systems and services (desirable).
- Up‑to‑date knowledge of current cyber threats and mitigation techniques.
- Knowledge of hardening infrastructure both on‑premises and in the cloud.
- Familiarity with patch management methodologies.
- Familiarity with Microsoft cloud technologies (e.g., Exchange, Azure, Intune, SharePoint, Teams).
- Confident, self‑motivated, and able to work both independently and as part of a team.
- Strong prioritisation skills and ability to act under pressure.
Additional requirements
9.5% on‑call allowance for participation in the on‑call rota (1 in 3). The role requires coverage outside standard office hours, public holidays, and weekends, as well as potential short‑notice attendance at Trust sites in the West Midlands. A full clean UK driving licence and vehicle are required; mileage expense is available where appropriate.
EEO statement
West Midlands Ambulance Service University NHS Foundation Trust is committed to creating an inclusive and diverse workplace. All applicants who meet the essential criteria are guaranteed to be invited for assessment or interview, irrespective of disability or learning difficulty.
Disclosure and Barring Service Check
As a regulated activity, the post requires an Enhanced Disclosure & Barring Service (DBS) check, including reference to the Independent Safeguarding Authority barred lists for work with children and adults. Applicants will be responsible for covering the cost of the check.
#J-18808-Ljbffr…