Moorfields Eye Hospital, London, Fellowship
Associate Information Security Practitioner
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
YOU MAKE US MORE
Join Moorfields Eye Hospital NHS Foundation Trust
At Moorfields, people’s sight matters—and so do the people who make it possible.
For over 200 years, Moorfields has been at the forefront of ophthalmic care, research, and education. With more than 2,300 dedicated team members and over 700,000 patients seen annually across our City Road site and 22 networked sites, we are proud to be a global centre of excellence.
We're also a vibrant community where kindness, equity and excellence shape every aspect of our work. Whether it’s pioneering research through our partnership with UCL Institute of Ophthalmology and Moorfields Biomedical Research Centre or training the next generation of global eye care leaders, we’re united by one mission—delivering world-class eye health, sustainably and at scale.
And we’re just getting started.
From 2027, we’ll move to our brand-new Oriel site in St Pancras, Camden—a state-of-the-art centre that will unite eye care, research, and education under one roof. This groundbreaking facility, developed in partnership with UCL Institute of Ophthalmology and Moorfields Eye Charity, will enable transformative innovation and collaboration like never before.
Could you be part of this future? Make us more.
Job Overview
The Associate Information Security Practitioner role is part of the Moorfields Information Security Team. The team ensures that our systems and data are safe, secure, and resilient – so that we can focus on delivering high-quality, patient-centred care, and are trusted by our patients, service users and staff.
The team has operational responsibility for security tooling, such as anti-virus and intrusion prevention, security assurance platforms, security testing and monitoring platforms, etc) and for our managed services (security operations centre). The team performs assurance and compliance activities most notably contributing to the annual NHS Data Security Protection Toolkit (DSPT) cycle.
We put people at the heart of everything we do, and Moorfields is undergoing digital transformation. With the ever-increasing need and interest in the use of digital technology in healthcare, there is also an increase of cyber threats across the sector. You will be part of a team of Digital, Data and Technology experts that deliver excellence in a busy department.
Main duties of the job
At This Role Level, You Will
- Contribute to operational support of information security solutions and services
- Engage with our third party provision of information security service
- Contribute Information Security expertise to projects and operational services
- Support assurance activities and the improvement of security and resilience of our organisational infrastructure.
- Be proactive in identifying problems and translating these into non-technical descriptions that can be widely understood.
Skills
In your role you will partner with other technology and data teams in the organisation. It is expected alongside specialist information security and business continuity skills and experience, you will have generalist or specialist experience in at least one of the following areas:
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
- Cloud operations
- Domain directory services/IAM
- Infrastructure operations
- End user device management
- Network security and operations
- Security architecture
Working for our organisation
What’s in it for You?
At Moorfields, we invest in you—your growth, your wellbeing, your future.
You’ll Join a Flexible, Supportive Organisation Offering
- Competitive salary (including high-cost area supplement)
- Membership of the NHS Pension Scheme
- 24/7 independent counselling support
- Career-long learning and development opportunities
- Excellent transport connections
- Access to NHS and Blue Light discount schemes
- Free Pilates classes
- Full support and training to develop your skills
And so much more! To see the full range of benefits we offer please view our Moorfields benefits leaflet.
Detailed Job Description And Main Responsibilities
Information security
- Undertake Information Security Assessment activities, including supply chain / 3rd party assessments following National Cyber Security Centre evaluation best practices for cloud and on premise technologies.
- Monitoring practices including key performance indicators on security enforcing tools such as anti-virus, patching, and driving security posture improvements.
- Participate in technical audit activities including vulnerability management, security testing, audits, and investigations. This includes the ability to ensure remediation of findings are handled and fed into continuous service improvement activities.
- Incident management of cyber security events of all severities, throughout the incident lifecycle.
Policies and security awareness
- Contribute to the development of the Trust information Security policy framework, considering regional and national policies and practices.
- Apply policy to working practices and procedures, and guide colleagues towards information security policy.
Person specification
Education/Qualification
Essential criteria
- Degree, or equivalent experience or knowledge
- Relevant information security qualification or equivalent experience or plan to obtain within 12 months
Desirable criteria
- Service management qualification or equivalent experience (example: ITIL)
Experience
Essential criteria
- Experience of solving complex business problems for users using technology – balancing usability with security
- Experience in managing critical incidents, and problem investigation + resolution (including managing security incident response, and information security breaches
- Experience of working with conflicting, highly complex, and/or highly sensitive information
Desirable criteria
- Experience in conducting or managing information security audits, penetration testing, table-top / simulation exercises, and incident investigations
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Skills and Knowledge
Essential criteria
- Strong domain knowledge in at least one of the following areas, and the ability to acquire an adequate understanding of the other areas:
- Enterprise Architecture
- HMG Secure Policy Framework (SPF) and Information Assurance Maturity Model (IAMM)
- ISO27001
- Risk assessment and management
- Data security and protection toolkit (DSPT)
- Good communication skills – tailoring your message for your audience, providing, and receiving highly complex, sensitive and/or contentious information, able to communicate complex technical information in a simple way to stakeholders
- Prioritisation of work – within the team and across the wider Digital, Data and Technology teams
Desirable criteria
- Present complex, sensitive, and contentious information to large groups
Due to the nature of this position, employment is subject to proof of eligibility to work in the UK, completion of a satisfactory DBS disclosure and two references. We do not offer visa sponsorship for roles unless clearly stated in our adverts, so please consider this before applying.
Our commitment to equality, diversity and inclusion is at the heart of our organisational culture. As part of our pledge to take positive action in recruitment we encourage applications from under-represented candidates including BAME (Black, Asian, and Minority Ethnic) and Disabled candidates as we work towards a representative workforce that is able to provide the quality, the dignity and respect and to deliver above and beyond.
Moorfields is a flexible working friendly organisation, and we are committed to helping our employees achieve a work-life balance that is beneficial for health and wellbeing, motivation levels and job satisfaction. Every employee of the Trust has the right to request to work flexibly. Please speak to us about how we might be able to accommodate a flexible working arrangement. If it works for the service, we will do our best to make it work for you.
If we receive sufficient applications, we will close this ad prior to the closing date. You are advised not to delay submitting your completed application.
If you would like to discuss any reasonable adjustments before applying or would like an accessible version of any recruitment documents, please contact the recruitment team at moorfields.recruitment@nhs.net.
https://www.moorfields.nhs.uk/work-for-us
Employer certification / accreditation badges
Documents to download
- Associate Information Security Practitioner (PDF, 504.6KB)
- MEH Staff Benefits (PDF, 919.1KB)
- MEH Privacy Notice (PDF, 138.0KB)
Apply online now
Further details / informal visits contact
- Name: Jennifer Denitto
- Job title: Head of Information Security
- Email address: jennifer.denitto@nhs.net
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location