Job vacancy: Cyber Security Analyst, Velindre University NHS Trust, Nantgarw

Job summary

Main area: Cyber Security
Grade: Band 5
Contract: Secondment: 24 months
Hours: Full time - 37.5 hours per week (A minimum of 2-3 days on site each week, across all Trust locations. Increasing at key times, to meet the requirements of this role. May be required to attend site at short notice during an incident.)
Job ref: 120-AC827-1025

Employer: Velindre University NHS Trust
Employer type: NHS
Site: Velindre NHS Trust
Town: Nantgarw
Salary: £31,516 - £38,364 Pro rata
Salary period: Yearly
Closing: 21/10/2025 23:59

Cyber Security Analyst

Band 5

Thank you for your interest in working for Velindre University NHS Trust, which is a committed equal opportunities employer. The Trust welcomes applications from people who share our vision;

Velindre University NHS Trust will be recognised locally, nationally and internationally as a renowned organisation of excellence for patient and donor care, education and research.

our values;

Caring
Respectful
Accountable

and who will complement our current experienced and specialist employees who are passionate about working in a Trust that has the ambition to provide world class services and care to patient and donors.

Velindre University NHS Trust holds a special place at the heart of healthcare in Wales. It is also an amazing organisation to work and to develop your career. The Trust comprises of two divisions, Velindre Cancer Centre and Welsh Blood Service. The Trust also hosts on behalf of the Welsh Government and NHS Wales, NHS Wales Shared Services Partnership (NWSSP) and Health Technology Wales (HTW).

Velindre University NHS Trust provides our employees with a favourable salary and reward / staff benefits & support package.

For more information on this vacancy please contact the recruiting manager, who will be pleased to discuss their employment opportunity with you.

Please check your email account regularly. Successful applicants will receive all recruitment related correspondence via the email account registered on the application form.

The Trust also reserves the right to close a vacancy early or withdraw an advertisement at any stage of the process, to enable internal staff requiring to be redeployed in suitable roles.

Posts may be subject to a Disclosure and Barring Service (DBS) Check and Professional Registration Check.

For more information on our Trust Employee Reward and Benefit’s Package please visit the Velindre University NHS Trust website.

Applications may be submitted in Welsh. Applications submitted in Welsh will not be treated less favourably than an application submitted in English.

Detailed job description and main responsibilities

You will be able to find a full Job description and Person Specification attached within the supporting documents or please click “Apply now” to view in Trac.

This post is fixed term/secondment 2 Years. If you are interested in applying for the secondment position, you must obtain permission from your current line manager prior to applying for this post. PLEASE NOTE Applicants will need to get permission from their line manager before submitting their interest, a release form to be included with your application form can be downloaded here. (This form is for the staff member and line manager to complete and return to you)

Person specification

Qualifications

Essential criteria

Educated to Degree level or working towards (preferably Cyber Security) or equivalent and a recognised qualification in Cyber Security e.g. CISMP, CompTIA or equivalent level of work experience and knowledge
Network 75 scheme
Previous experience of working to KPI’s / targets.
Experience, or understanding of live monitoring, SIEM and monitoring devices.

Desirable criteria

Previous experience of working in the digital field in the NHS or a healthcare setting.
Knowledge of cyber security frameworks such as MITRE ATT&CK, NIST Cybersecurity Framework, NCSC Cyber Assessment Framework.
Knowledge of regulations such as GDPR/DPA and Network and Information Systems (NIS).

Experience

Essential criteria

Relevant experience working in Cyber Security.
Evidence of Cyber Security or other relevant work outside formal training or employment (voluntary, research, academia, social media etc.).

Desirable criteria

Experience of ICT service provision in a healthcare setting.
Delivery of training to technical and non-technical staff.
Report writing.
Development of Standard Operating Procedures.
Experience working with SIEM solutions.

Skills

Essential criteria

Awareness and knowledge of security principles, understanding frameworks (ISO) etc, systems and lifecycles.
Knowledge of digital best practice, information security and information governance.
Understanding the need for security requirements across a varied estate.
Able to maintain and apply an understanding of how you should design security into your environment.
Proven ability for attention to detail.
Able to follow documented processes and policies.
Ability to use own initiative and judgement.
Able to plan, prioritise and manage conflicting agendas and priorities in order to meet challenging deadlines.
Able to evaluate options to aid decision making.
Demonstrates excellent time management skills.
Excellent communication skills in order to convey digital / cyber issues to a non-digital / cyber audience.

Desirable criteria

Understanding of project and change management skills and techniques.

IMPORTANT NOTE FOR APPLICANTS:

Applications for our roles are carefully reviewed and shortlisted based on specific criteria, which varies from job to job. Using a generic application to apply for multiple roles or relying on automated AI application services, such as Lazy Apply or AI Apply, may not provide the necessary information, leading to your application not demonstrating how you meet the essential criteria. To ensure your application meets the criteria, we recommend submitting a tailored application that directly addresses the criteria listed in the Person Specification section of the advert.

To work in the UK, all candidates who are not UK or Republic of Ireland (RoI) nationals require sponsorship to obtain either a Health and Care visa or Skilled Worker visa, unless you have permission to work via another route. Non UK / RoI candidates wishing to apply should self-assess the likelihood of obtaining a Certificate of Sponsorship by visiting Work in the UK. If you are eligible for the Health and Care visa, application costs are lower and you do not need to pay the annual Immigration Health Surcharge.