Job description
Core Information Security Analyst
Location: this is a hybrid role based in central London (our offices are on the river!)
Contract Type: Permanent
Why join HCA’s ITG team:
HCA Healthcare UK’s Information Technology Group (ITG) is a Group IT function, developing and managing all aspects of healthcare IT across our portfolio of hospitals, clinics, outpatient centres, laboratories, and other associated businesses. Our colleagues are dedicated to HCA Healthcare’s mission of continuously providing high quality and compassionate patient-centred healthcare. The ITG team are a vibrant, innovative, mission focused team who have a strong focus and commitment of maintaining the strong culture we have here. We aim to promote from within (and do so 40%+ of the time!) and therefore harness and invest in the talent we have. Above all else, we are committed to the care and improvement of human life and how the work we do makes that possible. Come and join us!
About the role:
The ITG Security Department is responsible for:-
Information security: Defining and operating a framework of security controls and security management strategies.
Security Operations: Delivering management, technical and administrative services to implement security controls and security management strategies (physical security and information security)
This role is within the Governance Risk and Control (GRC) team in ITG Security Department at HCA UK. As we look to increase our effectiveness and maturity in Security management this will be a key role in helping us achieve those aims both in contributing to our day-to-day security management activities but in helping us shape and design how and where such affairs can be improved in the future.
Specific Deliverables
Security operations - delivering management, technical and administrative services to implement security controls and security management strategies.
Incident management - coordinating responses to incident reports, minimising negative impacts and restoring service as quickly as possible.
Information security - defining and operating a framework of security controls and security management strategies.
Ensures all security processes, requests, and incidents are handled according to agreed procedures.
Investigates security breaches in accordance with established procedures and recommends required actions.
Provides support and checks that corrective actions are implemented.
Prioritise and diagnoses incidents, investigating the causes, seeking resolutions, escalating unresolved incidents.
Contributes to the improvement of testing and incident management
Provides guidance on the application and operation of security controls.
Performs security risk and business impact analysis.
Identifies risks that arise and design alternate solutions
Investigates suspected attacks and supports security incident management
About you:
Experience in Security Technologies/Methodologies
Experience with Information Governance, Risk, Regulatory or Compliance desirable.
Knowledge of NIST Cyber Security Framework desirable.
Experience with ISO 27001 desirable.
Excellent communication with the ability to present complex information to both technical and non-technical audiences.
Analytical and Data driven approach to problem solving
Ability to appropriately manage task deadlines
Self-starter and team player.
If you would like to join HCA Healthcare UK as a Information Security Analyst and be part of an organization shaping a healthier tomorrow, we invite you to apply. Our application process is quick and easy, completing a 2-minute questionnaire and upload a CV.
#LI-HA1