Cyber Security Governance & Risk Director

Cardiff and Vale University Health Board; Manchester; On-site; GBP 120,000 - 150,000; Full time

Job summary

Cardiff and Vale University Health Board seeks an experienced senior leader to direct cyber security governance, risk, and compliance. You will shape the organisation's cyber strategy, policies, and controls, ensuring confidentiality, integrity and availability of information assets across the GM system.

You will lead threat intelligence, conduct complex risk assessments, maintain risk registers, and integrate cyber risk into broader organisational risk management.

Qualifications

• Masters degree or equivalent experience in a relevant field.
• Specialist cyber qualification and ongoing professional development.
• Experience designing and governing organisation-wide cyber strategies.

Responsibilities

• Lead cyber governance, risk and compliance across the organisation.
• Develop and implement a comprehensive cyber security programme.
• Oversee DSPT toolkit and Cyber Essentials/ISO 27001-aligned controls.
• Lead threat intelligence, risk assessments and mitigation prioritisation.
• Manage a multi-team function with budget responsibility.
• Engage senior stakeholders to drive cyber resilience and policy adherence.

Skills

Cyber security

Governance & risk management

Threat intelligence

Stakeholder management

Budgeting & financial processes

Project & change management

Information governance

NHS healthcare context

Education

Master's degree in a relevant field

Specialist cyber qualification

Job description

Cardiff and Vale University Health Board seeks an experienced senior leader to direct cyber security governance, risk, and compliance. You will shape the organisation's cyber strategy, policies, and controls, ensuring confidentiality, integrity and availability of information assets across the GM system.

You will lead threat intelligence, conduct complex risk assessments, maintain risk registers, and integrate cyber risk into broader organisational risk management.