Chief Information Security Officer: Cyber Resilience Leader

Liverpool University Hospitals NHS Foundation Trust; Liverpool; On-site; AUD 229,000 - 343,000; Full time

Job summary

Liverpool University Hospitals NHS Foundation Trust seeks a Chief Information Security Officer to lead cyber security, information governance and digital risk management across the UHL Group. You will shape security strategy, set risk appetite, and report to boards to embed security in all digital services.

Responsibilities include incident response leadership, governance delivery, regulatory compliance (DSPT, GDPR, Cyber Essentials Plus), and building group-wide capabilities across multiple

Qualifications

• Senior leadership in cyber security and information governance.
• Experience delivering cyber security strategy aligned with regulatory standards (DSPT, GDPR, Cyber Essentials Plus).
• Ability to translate policy into pragmatic controls and operating models.

Responsibilities

• Lead the development and delivery of the UHL Group cyber security and information governance strategy.
• Establish and maintain a Group-wide digital assurance and risk management framework.
• Ensure compliance with national standards for data protection and cyber security.
• Provide strategic leadership on cyber risk, resilience and incident response.
• Oversee management of cyber threats, vulnerabilities and security incidents.
• Embed security and assurance into all digital programmes and services.
• Lead development of policies, standards and procedures for cyber security and information governance.
• Provide expert advice to senior leaders and governance forums.

Job description

Liverpool University Hospitals NHS Foundation Trust seeks a Chief Information Security Officer to lead cyber security, information governance and digital risk management across the UHL Group. You will shape security strategy, set risk appetite, and report to boards to embed security in all digital services.

Responsibilities include incident response leadership, governance delivery, regulatory compliance (DSPT, GDPR, Cyber Essentials Plus), and building group-wide capabilities across multiple