HealthJobsUK

Swydd ddisgrifiad a phrif gyfrifoldebau manwl

In this role, you will be responsible for:

Security Architecture/Operations

1. Providing security leadership in the development and delivery of the NHSBSA digital services, working with other technical architects and
specialist SMEs, leading the design of the solution.
2. Working across/within different programmes and across different layers of architecture as needed and to translate business security
requirements into IT services, solutions, investment and migration roadmap.
3. Take ownership of a particular area of the business service, project or programme IT security architecture and ensure consistency with
the Enterprise Architecture, HMG Security Strategy, HMG Digital Strategy and DH Digital Strategy and provides input into IT Strategy.
4. Responsible for the security blueprint solutions for complex protective security of both physical and data assets clearly defining the asis and
to-be security architectures and document the transition to the to-be solution and its integration in the overall Enterprise and Security
Architecture blueprints.
5. Present the security design solutions to NHSBSA Senior Management, project and programme teams, and where appropriate, external
senior business stakeholders and be able to communicate and engage with a wide range of stakeholders to help shape and deliver IT
change. Articulate to a professional standard, both complex security threats and the proposed technical solutions in clear, informative and
accessible language, tailored as necessary for the intended audience.
6. Responsible to ensure the security solutions presented to architecture governance board within the programme pass architecture
governance gates.
7. Ensure that the infrastructure security architectural design remains up to date and that obsolete elements are phased out of the architecture
whilst ensuring business continuity and return on investment.

Staff Management

1. Management of staff including all line management responsibilities, performance management, appraisals, disciplinary, and standard HR
processes.
2. Participates in the recruitment, interviewing and selection of staff as and when necessary.
3. Responsible for prioritising and planning own whilst contributing to the team’s work and providing input to the prioritisation of projects and
programmes proposed and/or underway.

Knowledge Management

1. Research of the marketplace and constant awareness of industry trends and innovation using information to inform the ICT security strategy
of the NHSBSA and as input to design activities.
2. To work with NHSBSA staff and Third Parties to ensure that security standards, governance and processes are in place for producing.
3. and maintaining up to date, comprehensive, comprehensible documentation which will include IT service security “blueprints” for all systems and services.

Relationship Management

1. Identify opportunities, engaging and fostering relationships and partnership working within the organisation, and with third parties, to identify
and deliver value to the organisation.
2. Working across/within different programmes and across different layers of architecture as needed and to translate business security
requirements into IT services and solutions.
3. Work with organisations external to the NHSBSA (e.g. the DH and GDS) when necessary to assist in clarifying their needs and requirements
and be capable of devising options for security solutions, along with full assessment and cost estimation.

Information Management

1. Handles sensitive commercial & financial information, ensuring that the security solution architectural designs adhere to relevant legislation
and standards including for example, Information Security, NHS Confidentiality and Data Protection legislation.
2. Implement, monitor and report on a number of areas including agreed service levels, KPI's and standards within security operations.
3. Monitor, report, present or escalate issues as appropriate to the Security Operations Manager.

Delivery Management

1. Operate as an SME and point of authority on security architecture, making credible, pragmatic and practical security decisions and
communicate with sensitivity and diplomacy to ensure the right technical direction is followed and to guide the business to make the best use
of its existing IT where appropriate and to make recommendation about what other IT assets it needs to invest in.
2. To demonstrate creativity and innovation in applying IT solutions and services to develop and improve services and quality for the benefit of
the organization and/or the end user of technology services. This includes devising and managing security initiatives to enable exploitation of
digital services, capacity, performance, and system availability improvements that ensure business targets are met or exceeded and legacy
services decommissioned, whilst ensuring data security and controlled access to data.
3. Responsible for providing expert help and guidance across the lifecycle of a security solution implementation, including technical and nontechnical aspects. This includes the migration of services across suppliers and closely with Technical Architects ensuring the solution and
service design is successfully translated, built delivered and operated to meet security and business requirements.
4. To identify and interpret DH, GDS, local and national security policy changes and directives, and assess the impact on IT Infrastructure and
surrounding processes, including influencing policy information within own security specialism.
5. Produce and deliver in depth reports and/or presentations to NHSBSA, HMG or DH stakeholder’s staff and external parties, on any aspect of
the work delivered.
6. Promotes best practice in health, safety and security and ensures safe use of all IT systems and equipment.
7. Is aware of their own development requirements and actively seeks development opportunities for themselves and their team.
8. Responsible for promoting and supporting people’s equality, diversity and rights.