NHS England Cyber Security

At NHS England, cyber security is fundamental to delivering safe, reliable healthcare services to millions of people every day. Our Chief Information Security Office (CISO) Function plays a critical role in protecting national systems and enabling secure digital transformation across the NHS.

About the Role

As part of the CISO Function, the Senior Cyber Security Advisor is a key member of the Security Consulting (Secure) team, providing expert cyber security consultancy across NHS England’s Critical National Infrastructure and major national services. The role focuses on ensuring systems and services are designed and delivered in line with secure by design principles, embedding security from the outset.

Our Senior Cyber Security Advisors work closely with programmes, project teams and DevOps teams to ensure systems are underpinned by resilient architectures. They provide clear, actionable cyber security guidance, support the identification and management of cyber risk, and influence design decisions to reduce the likelihood and impact of compromise.

This is a unique opportunity to contribute to the delivery of secure, resilient national services at scale. You will be empowered to apply your expertise, working collaboratively across organisational boundaries, to make meaningful impact on patient safety and the resilience of the NHS.

Responsibilities

• Deliver expert consultancy to programmes and services, ensuring solutions are secure by design and resilient to evolving cyber threats.
• Conduct threat modelling, security assessments and risk analysis, clearly articulating risks and recommending proportionate controls to reduce likelihood and impact.
• Provide authoritative guidance on security architecture, standards and patterns, embedding effective governance and controls across the technology lifecycle.
• Work collaboratively across technical and non-technical teams, resolve complex challenges, influence decisions, and strengthen cyber resilience outcomes.
• Champion a strong security culture, enabling delivery teams to build secure systems from the outset, and supporting programme objectives through clear security strategies and effective risk management.
• Identify, assess and manage cyber risks, ensuring they are understood, tracked and mitigated in line with organisational and national standards. This is a critical role in maintaining NHS England’s alignment with government policy and industry best practice.
• Apply technical expertise and creative problem-solving to protect patient data, support safe care, and maintain public trust.