Betsi Cadwaladr University Health Board
Cyber Security SOC and Compliance Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Security SOC and Compliance Engineer
Cyber Security Analyst Position – Cyber Security and Compliance Team
Job Overview
At BCUHB ICT, we are shaping the future of healthcare through digital innovation. Our mission is to revolutionise patient care and outcomes by leveraging cutting-edge technology and sophisticated operational approaches.
Working alongside our Digital Strategy, we are:
- Streamlining processes to optimise resources
- Cultivating a culture of collaboration and continuous improvement
- Leading game-changing digital advancements in healthcare
This is an opportunity to be at the forefront of transformation—whether you’re a developer, leader, innovator, or supporter of cutting-edge advancements.
Do you have a passion for driving meaningful change and making an impact? If so, apply now and join us in building something extraordinary.
Role Overview
You will join the Cyber Security and Compliance Team, reporting to the Cyber Security and Resilience Manager, with direct responsibility for:
- Proactively monitoring and protecting the ICT infrastructure from cyber threats
- Ensuring the resilience of systems that support critical patient services
This role requires an enterprising, results-driven thinker who thrives in a fast-paced environment. You will: ✔ Combine analytical thinking with strong influencing and communication skills ✔Drive engagement and adaptability across the ICT service to embed effective change management ✔Develop and support methodologies for executing a successful digital transformation
Main Duties & Responsibilities
Core Tasks:
- Provision of a Virtual Security Operations Centre (SOC) function, including:
- Monitoring and reviewing the Security Information & Event Management (SIEM) system and supporting controls
- Proactively analysing suspicious or malicious activity
- Incident Response & Mitigation:
- Evaluating data patterns and trends to identify corrective/preventative actions
- Supporting Cyber Security Awareness Programs, addressing requirements for Information Security Management Systems (ISMS), Cyber Essentials, and NIS-R compliance
- Threat Intelligence & Awareness:
- Maintaining up-to-date knowledge of cyber threats
- Conducting threat hunting based on emerging risks
- Compliance & Reporting:
- Developing and delivering monitoring systems to assess adherence to industry standards
- Collaborating on proactive compliance strategies
- Consultative & Advisory Role:
- Providing tactical guidance on ICT and cyber security queries
- Balancing user needs with system security, leveraging controls and technologies
Key Qualities Required:
- Resilience – Ability to operate effectively under pressure
- Initiative – Ready to anticipate challenges and take proactive action
- Cultural Agility – A natural ability to mobilise stakeholders through clear communication and collaborative approaches
- Crisis Response – Decisive yet measured in fast-paced cybersecurity scenarios
Experience & Skills
Supervisory & Analytical Competencies
(Skills needed to engage, troubleshoot, and thrive in an ICT environment)
- Technical Proficiency:
- Experience in complex ICT environments, particularly those exposed to cybersecurity threats
- Systems administration (configuration, coding principles, log analysis)
- Structured Query Language interfaces and multi-vendor OS environments (Windows technologies preferred)
- Troubleshooting Expertise:
- Problem-solving in high-pressure situations, including cross-department collaboration
- Assessing cybersecurity risks and vulnerabilities and implementing mitigation strategies
- Professional Communication:
- Ability to simplify complex technical concepts for clear, actionable presentations
- Developing threat intelligence reports, embedding findings into operational/educational workflows
- Research & Initiative:
- Conducting self-driven investigation into emergent attack vectors, tactics, and threats
- sourcing industry best practices to augment resilience frameworks
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Cultural Fit & Leadership Values
(Soft skills essential for driving transformation within a healthcare setting)
- Collaborative Influence:
- Capacity to persuade and negotiate with staff at all levels—from clinical teams to senior management
- Flexibility & Adaptability:
- Willingness to adapt workflows under conditions of change
- Comfort navigating interdisciplinary problem-solving
- Conceptual Thinking & Decision-Making:
- Critical evaluation of technical and operational trade-offs
- Application of sound judgment to balance user needs with security risk mitigation
Computational/Analytical Strengths
(FGPCRA framework: Foundational, Grow, Persuade, Compliance, Resilience, Analytical)
- Analytical:
- Excel in data pattern recognition, identifying exceptions, and constructive intervention
- Interpret trends through technical logs and governance frameworks
- Compliance & Processes:
- Proven risk assessment capabilities to align with frameworks like NHS Information Security Standards and NHS Cyber Essentials
- Tools & Cultures:
- Familiarity with Microsoft security toolsets (excluding specific certification>
- Ability to integrate with partnerships (2 servers, Open Text NextLabs, Cisco APIs, etc.)
About BCUHB North Wales
We are Betsi Cadwaladr University Health Board—Wales’ largest health organisation. Our every day work impacts 700,000+ people by delivering a broad spectrum of ✔ Primary care, community services, mental health, acute care, and elective surgery.
Why Join Us?
- Mental & Cultural Support:
- Strong emphasis on well-being, aligned with our Organisational Values and the ‘Proud to Lead’ framework
- Early careers pathway insights tailored to professional development through mentorship and internal mobility channels
- Inclusion & Recognition:
- Programs under our Disabled-basedoran Commitment framework
- Pledge to reduce turnover through healthy work practices and regionally negotiated contracts
- Enhancements:
- PartnershipsΕ-collapse benefits (volunteer credits, rewards, discounts)
- FIS & HR Access Tools including pay, employment policies, updates toolkit
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Flexibility & Relocation Policy:
Access to value-adding perks during recruitment while providing remote remote-to-office (if required) structure.
What We Offer You
Compensation & Support
- Perks:
- Car Leasing Scheme
- Free membership of the British Computer Society
- Generous ieken accrual policies (+ bank holidays, unbeaten 34-day holiday allowance (equating over 6x Welsh week)
- Pensionable Benefits:
- NVW+ Contribution with vendors like Ublox
Quality-of-Life Advantages
- Flexible Work Schedules:
- Agile/WFH availability (aligned to safe office locations if hybrid)
- Location-based fast-track options for NHS workers at different levels of responsibility
- Additional Perks/Educational Assistance:
- Cycle to Work Scheme
Person Specification
Qualifications & Knowledge
(Essential Criteria marked)
-
Technical Proficiency:
- An honours degree (or equivalent experience) at degree level
- Previously known PTTLS (PTTL; Level 3 Training Award) qualification, or similar.
-
NHS Specific:
- NHS/Welsh Delivery Standards and digital transformation policy literacy, including:
- Intimacy with NHS shared applications’ e-Workbook, particularly tied to DigiCare Wales Living Data Strategy
- NHS/Welsh Delivery Standards and digital transformation policy literacy, including:
Certifications (Desirable but not compulsory)
- CISCO, CISSP, CCNA, Cloud Systems envisioned
- IT Governance-aware (without explicitly requiring certification)
Working with Complex Systems
- Log files: Windows Application, Security, Infrastructure
- Python scripting encountered within SIEM policies
Experience
(Most Valued Membership tentaacle to seet:-4)
- Relevant knowledge in popular systems like xentia Analytics (Microsoft DLLs, Doit IO in luận thành tựu filter dữ liệu, or SAP, BCS Jamie Hards)
- Cyber Essentials/vGNR/GDPR workloads impactful on remediation processes
Recommendations for subject-matter cessationFrame (e.g. internal transitions):
- IT Service, Working nature from hospitalsand/or larger organisations (Alignment prone to risk acceptance.)
- NHS/social care would favourably amplify relevant value.
Career growth path-cycle development (targeted upward opportunities need due)
- Person specification, Key questions reported. - What meets OGC DDRP operational framework. - *Monitoring flow adoption onto Steps to trim variable decision timepoint.
Note on Welsh Proficiency:
While Welsh is not mandatory, support is proactive in Welsh-based teams as well - ensuring fairness in application interpretation here across our **ethos’.
application wording request suitofib outline opales boundary/ready to apply span app window open event.
Next Steps
- Read through the Job Description & Person Specification—available on the [pendantTrac] online application portal.
- Girl News: for Welsh/Language choice (assuring applications submitted in euroman won’t CMS disadvantage efforts).
- Apply now before our Open Qualities Window closes.
Now starting Q&A indicators...
but not for safety mark below NEXT SECTION AS PER US AND MONDAY schedule in courses.```
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location