DEPUTY MANAGER, CYBERSECURITY OPERATIONS

GENERAL DESCRIPTION

A Deputy Manager role with strong technical expertise is required to address a critical capability gap following the departure of a key resource in November and to ensure continued effective oversight of SOC and network security operations.

As GTS Cyber Security now provides protection for approximately 17,000 staff across 30 hospitals, the scale and complexity of the environment have increased significantly, particularly with the organisation’s expansion into digital platforms and AI-enabled initiatives.

This role will provide hands-on technical leadership in cybersecurity architecture, supporting the validation of security controls, strengthening network and infrastructure security oversight, and enabling timely and effective incident response. The position is essential to ensure cybersecurity operations remain resilient, scalable, and aligned with the organisation’s growth and clinical criticality.

JOB DESCRIPTION

Lead network and infrastructure security operations to ensure resilient, secure, and reliable connectivity across all hospitals and core systems.

• Own and manage the network security posture, including firewalls, network segmentation, VPN, NAC, and related controls.
• Oversee SASE operations, including service delivery performance and management of the resident engineer.
• Lead infrastructure vulnerability and secure configuration management, ensuring timely identification, prioritisation, and remediation of risks.
• Act as the primary escalation point with the SOC for network and infrastructure-related security incidents.
• Lead incident response activities for infrastructure-related threats, coordinating containment, recovery, and post-incident actions.
• Coordinate closely with hospital infrastructure teams to drive remediation and corrective actions.
• Ensure high availability and operational resilience of network and infrastructure services supporting clinical operations.
• Provide cybersecurity input into network and infrastructure architecture design, ensuring security-by-design principles are embedded in new and existing environments.
• Participate in IT and digital transformation projects as a cybersecurity representative, reviewing designs, implementation plans, and technical controls.
• Advise project teams on secure network segmentation, connectivity, cloud integration, and resilience considerations.
• Contribute to the development and refinement of cybersecurity strategy and roadmaps, particularly in areas impacting network and infrastructure security.
• Support technology evaluation and solution selection by assessing security implications of new network, infrastructure, and connectivity solutions.
• Collaborate with enterprise architecture and infrastructure teams to align cybersecurity controls with business and operational requirements.

Success Measure:

• Reduction in network and infrastructure-related security incidents and repeat issues.
• Percentage of network segmentation coverage aligned to security standards and criticality.
• Vulnerability and configuration remediation closure rate within defined risk-based timelines.
• Availability and uptime of critical clinical and business infrastructure services.
• Effectiveness of incident response, measured through response time, containment, and recovery outcomes.

JOB REQUIREMENTEducation (Preferred, Not Mandatory)

• Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, or a related field
• Professional certifications (highly valued, in lieu of formal education):
• Network & Security: CCNP Security, PCNSE, Fortinet NSE, Check Point
• Cybersecurity: CISSP, CISM, CEH
• Cloud security (if relevant): Azure Security Engineer, AWS Security Specialty

Knowledge and Experiences:

• 8–12 years of experience in network, infrastructure, or cybersecurity roles, with at least 3–5 years in a lead or senior technical capacity
• Strong hands-on experience managing:
• Firewalls, VPNs, NAC, and network segmentation in enterprise environments
• Hybrid infrastructure (on-prem + cloud), especially in large, distributed environments

• Proven experience in:
• Infrastructure vulnerability management and secure configuration baselines
• Incident response for network and infrastructure-related threats
• Working with SOC teams and managed security services (e.g., SASE, MSSP)
• Experience supporting high availability environments (mission-critical systems)

• Exposure to:
• Network architecture design and security-by-design principles
• Large-scale transformation or migration projects (e.g., cloud, tenant migration, network modernization)

Skills & Competencies:

• Strong technical troubleshooting and root cause analysis across network and infrastructure layers
• Ability to translate security risks into operational and business impact
• Network protocols, routing, and segmentation strategies
• Zero Trust, SASE, and modern network security architectures
• Ability to prioritise remediation based on risk, impact, and operational constraints
• Strong documentation and reporting skills (incident reports, risk posture, architecture reviews)

Special skills required

Experience in Firewalls, SASE, Cloud Tenants, Secure Configuration Standards – CIS, EDR

Personal attributes

• Strong sense of ownership and accountability for critical infrastructure security
• Calm and decisive under pressure, especially during incidents
• Practical and solution-oriented (not overly theoretical)
• Able to balance security vs operational continuity, especially in clinical environments
• Strong collaboration mindset across technical and non-technical teams
• Proactive in identifying risks and driving remediation without constant oversight
• Continuous learner, keeping up with evolving threats and technologies