Employer: Digital Health and Care Wales
Job Title: IT Specialist
Location: United Kingdom
Job Type: Full-time
Salary: £31,516 to £38,364 per annum
Closing Date: 11 January 2026
Job Summary
An exciting opportunity has arisen to join the NHS Wales Cyber Resilience Unit as an IT Specialist. Digital Health and Care Wales is seeking someone with a proven background in Information and Cyber Security, a flexible can-do attitude and approach to work, and the ability to provide advice and assurance that security risk across NHS Wales is being managed appropriately.
Who Are the Cyber Resilience Unit (CRU)?
The NHS Wales Cyber Resilience Unit (CRU) is an independent team hosted by Digital Health and Care Wales. The CRU has been established to operationalise the NIS regulations on behalf of Welsh Government and has oversight of NIS audits and associated action plans to remediate any gaps identified by those audits.
The CRU also provides support and advice for those completing the NCSC Cyber Assessment Framework (CAF) reporting framework and for reporting incidents in line with legislation such as NIS and the upcoming CSRB. The CRU is also responsible for reporting on the status of the NHS Wales cyber posture to Welsh Government as Competent Authority.
Main Duties of the Role
An IT Specialist (Cyber Resilience) is responsible for providing support to the CRU team to ensure the auditing and reporting service to NHS Wales is of an excellent standard, helping to establish the CRU as a world-class national service.
The IT Specialist supports the reporting and auditing process, carrying out duties in a consistent, concise, and professional manner, in accordance with cyber security legislation such as the NIS regulations and the upcoming CSRB, best practice, and Welsh Government requirements.
A full picture of the role can be found in the attached Job Description.
The ability to speak Welsh is desirable for this post; Welsh and/or English speakers are equally welcome to apply.
About Digital Health and Care Wales
Digital Health and Care Wales is an expert national body and part of NHS Wales. Digital Health and Care Wales works in partnership with NHS Wales colleagues and key stakeholders to provide national digital and data services that support the delivery of health and social care in Wales.
Modern health and care services depend on effective digital tools, data, and information. Digital Health and Care Wales runs or works with more than 100 services and delivers major national digital transformation programmes. In addition, Digital Health and Care Wales provides expert advice relating to cyber security and information governance.
Digital Health and Care Wales provides frontline staff with digital tools to support safer and more efficient care and offers patients and the public digital tools to better manage health and wellbeing, empowering people to live healthier lives. Digital Health and Care Wales places people at the heart of its work, operating to the highest standards to deliver quality and make digital a force for good in health and care.
Working for Digital Health and Care Wales offers employee benefits including flexible working, a competitive salary, 28 days of annual leave plus Bank Holidays, and opportunities for career development. Staff are recognised as the most valuable part of the organisation.
Job Description
Job Responsibilities
A full Job Description and Person Specification are available in the supporting documents or by clicking Apply now to view in Trac.
What Digital Health and Care Wales Is Looking For
IT Specialists in Cyber Resilience should be educated to, or working towards, degree level (preferably ICT or Cyber Security), or have an equivalent level of work experience and knowledge, preferably within an Audit, IT, or Cyber Security function.
Candidates should have a good level of knowledge gained through higher-level education, training, and/or work experience across ICT and information security procedures and practices. The following would be an advantage:
-
Understanding of the NCSC Cyber Assessment Framework (CAF)
-
Theoretical and specialist knowledge gained via recognised Audit or Cyber Security qualification or equivalent
-
Knowledge of NHS Wales or the Health sector
There is a requirement to travel throughout Wales between sites as required by the role. The ability to speak Welsh is desirable; Welsh and/or English speakers are equally welcome to apply.
Person Specification
Qualifications and Knowledge
Essential
-
Educated to or working towards degree level (preferably ICT or Cyber Security) or equivalent level of work experience and knowledge
-
Evidence of relevant experience, higher-level education and/or training
Desirable
-
Understanding of the NCSC Cyber Assessment Framework (CAF)
-
Theoretical and specialist knowledge gained via recognised Audit or Cyber Security qualification or equivalent
-
Knowledge of NHS Wales or the Health sector
Experience
Essential
-
Evidence of relevant further higher-level professional development
-
Relevant experience working in an Audit, IT, or Cyber Security function
-
Good understanding of application and network security
-
Experience providing guidance or technical or security support at an appropriate level
Desirable
-
Experience with ICT service provision in a healthcare setting
-
Report and SOP or procedure writing
-
Experience working with SIEM solutions
Skills and Attributes
Essential
-
Ability to communicate clearly with technical and non-technical staff at all levels of the organisation
-
Ability to communicate clearly with technical and non-technical staff at all levels of the organisation
-
Ability to evaluate and assist in selection of best-practice security controls
-
Broad range of ICT skills and understanding
-
Enthusiastic, self-motivated, and proactive in improving services, staff, and personal development
Desirable
-
Welsh language skills at Level 1 or above
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and requires a Disclosure and Barring Service check for any previous criminal convictions.
Certificate of Sponsorship
Applications from job seekers who require current Skilled Worker sponsorship to work in the UK are welcome and will be considered alongside all other applications.
From 6 April 2017, skilled worker applicants applying for entry clearance into the UK must present a criminal record certificate from each country they have resided in for 12 months or more in the past 10 years. Adult dependants are also subject to this requirement.
UK Registration
Applicants must have current UK professional registration. Further information is available via the NHS Careers website.
How to Apply
If you’re interested in this role, visit the official website for more information — click here to apply now.