Cyber Security Analyst - Practitioner

Are you an experienced cyber security professional looking to make a real difference in healthcare? Join Digital Services Cyber team and help protect critical systems, data and services that support patient care across our hospitals.

As a Cyber Security Analyst Practitioner, you will be responsible for triaging and investigating cyber alerts, managing security incidents, conducting cyber risk assessments and advising projects on information security risks. You will work with a wide range of technologies including Microsoft 365, SharePoint, firewalls, endpoint protection and national NHS security platforms, while supporting compliance with standards such as the Data Security and Protection Toolkit, Cyber Essentials and NIS Regulations.

We are looking for someone with proven cyber security experience, strong analytical skills and the ability to communicate complex technical issues to non-technical stakeholders. You will also support and mentor junior colleagues, contribute to security improvement initiatives and help strengthen our cyber resilience.

This role includes participation in a 24/7 on-call rota covering evenings, weekends and bank holidays.

Be part of a team that safeguards healthcare through innovation, collaboration and excellence.

Main duties of the job

Join a dynamic cyber security team protecting critical NHS systems and information. You will triage and manage cyber alerts, investigate incidents, provide expert advice on phishing, cybercrime and security threats, and act as the first escalation point for junior analysts. The role includes conducting cyber risk assessments, audits and compliance activities, while supporting standards such as the Data Security and Protection Toolkit, Cyber Essentials and NIS Regulations.

You will lead and support specialist activities including penetration testing, vulnerability management, security monitoring and the deployment of security updates. Working across platforms such as Microsoft 365, SharePoint, firewalls, antivirus and national security systems, you will analyse complex technical information, investigate potential breaches and support incident response and recovery.

The post also involves mentoring junior staff, deputising for senior colleagues, contributing to cyber security policies and remaining up to date with emerging threats and vulnerabilities. Strong analytical, technical and communication skills are essential, together with the ability to manage competing priorities in a fast-paced environment. Participation in a 24/7 on-call rota covering evenings, weekends and bank holidays is required.

About us

Bristol NHS Foundation Trust brings together more than 28,000 staff to deliver over 160 clinical services across thirteen hospital locations, operating from three main sites at Southmead, Bristol city centre and Weston.

With an annual turnover of 2.6 billion, we are now one of the largest NHS trusts in the United Kingdom.

Chaired by Ingrid Barker and led by Maria Kane as Chief Executive, Bristol NHS Foundation Trust aims to transform the way healthcare is delivered locally with a clear focus on making a difference for what we call our Four Ps:

Better outcomes for ourPatients

• More opportunities for our People
• Fairer more consistent care for ourPopulation
• Best Value for Public Purse

Our vision for five years from now:

• Patients will wait less time to be diagnosed and treated, and they will have the same high-quality experience and outcomes, regardless of who they are or where they live.
• We will meet rising demand by maximising the use of our available resources.
• More care will be delivered nearer to patients, in their homes or the community.
• Digital technologies will have transformed the way we work and the way we deliver care.
• Our people will feel engaged, energised and empowered by their work.
• We will be known as a place where people enjoy working, training and building a career.
• Our volume of globally renowned research and innovation will have grown significantly.
• We will contribute to system financial balance.

Details

Date posted

02 October 2026

Pay scheme

Agenda for change

Band

Band 6

Salary

£39,959 to £48,117 a year

Per Annum

Contract

Permanent

Working pattern

Full-time,

Flexible working

Reference number

387-CONSULTATION8371-SC

Job locations

Digital HQ

40 Southwell Street

Bristol

BS2 8EJ

United Kingdom

Job responsibilities

For a more detailed job description and main responsibilities, please refer to the job description document attached to this vacancy.

Job responsibilities

For a more detailed job description and main responsibilities, please refer to the job description document attached to this vacancy.

Person Specification

Qualifications and Experience

Essential

• Degree-level qualification relevant to the role or demonstrable equivalent experience
• Specialist knowledge acquired through postgraduate diploma level or equivalent experience.
• Previous experience working in the cyber security field.
• Experience working to KPIs and KRIs.

Desirable

• Previous experience working in digital roles within the NHS or a healthcare setting.

Skills, Knowledge and Competencies

Essential

• Knowledge of digital best practice, information security, and information governance.
• Working knowledge of control and assurance frameworks.
• Understanding of security categorisations, Digital Assessment Technology Criteria, and DPIAs.
• Proven attention to detail.
• Advanced keyboard skills and ability to maintain systems.
• Ability to use own judgement within broad processes and policies.
• Ability to evaluate multiple options to support decision-making.
• Excellent time management skills.
• Ability to compile a legal register.
• Strong communication skills to explain technical cyber issues to non-technical audiences.

Person Specification

Qualifications and Experience

Essential

• Degree-level qualification relevant to the role or demonstrable equivalent experience
• Specialist knowledge acquired through postgraduate diploma level or equivalent experience.
• Previous experience working in the cyber security field.
• Experience working to KPIs and KRIs.

Desirable

• Previous experience working in digital roles within the NHS or a healthcare setting.

Skills, Knowledge and Competencies

Essential

• Knowledge of digital best practice, information security, and information governance.
• Working knowledge of control and assurance frameworks.
• Understanding of security categorisations, Digital Assessment Technology Criteria, and DPIAs.
• Proven attention to detail.
• Advanced keyboard skills and ability to maintain systems.
• Ability to use own judgement within broad processes and policies.
• Ability to evaluate multiple options to support decision-making.
• Excellent time management skills.
• Ability to compile a legal register.
• Strong communication skills to explain technical cyber issues to non-technical audiences.

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.

Certificate of Sponsorship

Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).

From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).

Additional information

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.

Certificate of Sponsorship

Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).

From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).

Employer details

Employer name

Bristol NHS Foundation Trust

Address

Digital HQ

40 Southwell Street

Bristol

BS2 8EJ

United Kingdom

Employer's website

https://www.uhbw.nhs.uk/ (Opens in a new tab)

Employer details

Employer name

Bristol NHS Foundation Trust

Address

Digital HQ

40 Southwell Street

Bristol

BS2 8EJ

United Kingdom

Employer's website

https://www.uhbw.nhs.uk/ (Opens in a new tab)

Job responsibilities

For a more detailed job description and main responsibilities, please refer to the job description document attached to this vacancy.

Qualifications and Experience

Essential

• Degree-level qualification relevant to the role or demonstrable equivalent experience
• Specialist knowledge acquired through postgraduate diploma level or equivalent experience.
• Previous experience working in the cyber security field.
• Experience working to KPIs and KRIs.

Desirable

• Previous experience working in digital roles within the NHS or a healthcare setting.

Skills, Knowledge and Competencies

Essential

• Knowledge of digital best practice, information security, and information governance.
• Working knowledge of control and assurance frameworks.
• Understanding of security categorisations, Digital Assessment Technology Criteria, and DPIAs.
• Proven attention to detail.
• Advanced keyboard skills and ability to maintain systems.
• Ability to use own judgement within broad processes and policies.
• Ability to evaluate multiple options to support decision-making.
• Excellent time management skills.
• Ability to compile a legal register.
• Strong communication skills to explain technical cyber issues to non-technical audiences.