CISO: Strategy, Resilience & Digital Governance Leader

Liverpool University Hospitals NHS Foundation Trust; Sefton; On-site; GBP 120,000 - 170,000; Full time

Job summary

Liverpool University Hospitals NHS Foundation Trust invites a strategic CISO to lead cyber security, information governance and digital risk management across its multi-site NHS group. The role shapes policy, drives resilience, and ensures DSPT, GDPR and Cyber Essentials Plus compliance while enabling safe, digital-enabled care delivery.

The postholder will translate national policy into practical controls, build governance, manage incidents, and partner with clinical and operational leaders to

Qualifications

• Experience in senior leadership within large complex organisations.
• Proven ability to translate policy into security strategy.
• Experience with DSPT, GDPR and Cyber Essentials Plus.
• Budget management experience.
• NHS or healthcare sector experience preferred.

Responsibilities

• Lead cyber security and information governance strategy.
• Maintain group-wide digital assurance and risk framework.
• Ensure compliance with data protection and cyber standards.
• Provide strategic leadership on cyber risk and incident response.
• Oversee cyber threats, vulnerabilities and incidents.
• Embed security in all digital programmes.
• Develop policies and procedures for security and governance.
• Advise senior leaders and governance forums.
• Develop organisational capability in cyber security and data protection.
• Manage external regulators and partners.

Skills

Stakeholder comms

Negotiation & influencing

Strategic planning

Analytical judgement

Board engagement

Supplier management

Education

Master's degree in Cyber Security

Postgraduate Leadership qualification

CISSP / CISM / CRISC certifications

Job description

Liverpool University Hospitals NHS Foundation Trust invites a strategic CISO to lead cyber security, information governance and digital risk management across its multi-site NHS group. The role shapes policy, drives resilience, and ensures DSPT, GDPR and Cyber Essentials Plus compliance while enabling safe, digital-enabled care delivery.

The postholder will translate national policy into practical controls, build governance, manage incidents, and partner with clinical and operational leaders to