Cyber Security Manager – Governance, Risk and Compliance (GRC)

Essex Partnership NHS Foundation Trust; Grays; Presencial; GBP 49 000 - 57 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

27 days annual leave

Pension of up to 14.5%

Relocation package

Staff discounts

Season ticket loans

Resumo da oferta

Essex Partnership University NHS Foundation Trust is recruiting a Cyber Security Manager – Governance, Risk & Compliance (GRC) to lead cyber assurance across the Trust. Reporting to the Associate Director of Information Security, you will shape risk management, governance frameworks and compliance in a complex NHS environment.

You will work with senior stakeholders, coordinate audits, and oversee a penetration testing program, incident preparedness and team development.

Qualificações

• Expert knowledge of cyber security governance, risk and compliance.
• Experience with ISO 27001, CAF, DSPT, COBIT or similar standards.
• Proven ability to lead risk management, audits and assurance programmes.
• Experience managing security incidents, vulnerability management and monitoring.
• Demonstrated success leading teams, driving change and meeting deadlines.
• Excellent analytical, problem-solving and decision-making skills.
• Outstanding communication and stakeholder engagement with senior levels.
• Experience in large complex organisations (NHS/public sector desirable).
• Relevant professional certifications (CISM, CISA, CRISC, CGRC) or equivalent.
• Driven, proactive, resilient under pressure; collaborative and adaptable.
• Passionate about cyber security and emerging technologies.
• Able to simplify complexity and bring clarity to issues.

Responsabilidades

• Lead governance and assurance, aligning with ISO 27001, CAF and DSPT; deliver assurance reports to senior and board-level stakeholders.
• Identify, assess and mitigate cyber risks; coordinate audits and evidence.
• Lead penetration testing programme and monitor remediation, KRIs and control effectiveness.
• Develop incident response planning and tabletop exercises with cross-functional teams.
• Lead and develop the cyber security team, managing resources and priorities.
• Engage stakeholders and communicate complex risks to senior leadership.

Conhecimentos

GRC leadership

ISO 27001

COBIT

DSPT

risk management

audits

stakeholder engagement

leadership

communication

public sector experience

certifications (CISM, CISA, CRISC, CGR

Descrição da oferta de emprego

Cyber Security Manager – Governance, Risk and Compliance (GRC)

A Vacancy at Essex Partnership University NHS Foundation Trust.

Cyber Security Manager – Governance, Risk and Compliance (GRC)

Band 7 - £49,387 - £56,515 per annum

Thurrock Community Hospital

Are you ready to lead cyber security at scale in a complex, mission-driven organisation where your work truly matters?

We’re looking for an experienced and passionateCyber Security Manager – Governance, Risk & Compliance (GRC)to drive our cyber assurance agenda and strengthen the resilience of critical NHS services. Reporting directly to the Associate Director of Information Security (CISO), you will play a pivotal leadership role, shaping how we manage cyber risk, compliance, and governance across the Trust.

This is more than a management role — it’s an opportunity toinfluence strategic decision-making, protect vital services, and lead meaningful changein an evolving cyber landscape. You’ll work at the heart of the organisation, collaborating with senior stakeholders, technical teams, and external partners to ensure we meet the highest standards of cyber security and regulatory compliance.

We’re looking for someone who combinesdeep technical expertise with strong leadership, who thrives in a fast-paced environment, and who can translate complex cyber risks into clear, actionable insights.

In return, you’ll join a supportive, forward-thinking team where innovation is encouraged, professional growth is supported, and your impact will be visible across the organisation.

If you're shortlisted, your interview will take place in October 2026

As Cyber Security Manager – GRC, you will lead a high-quality governance, risk and compliance function, ensuring strong cyber assurance across the Trust.

What you’ll be doing:

Lead Governance & Assurance

Oversee cyber governance services, ensuring alignment with frameworks such as ISO 27001, CAF and DSPT. Manage the full lifecycle of policies and procedures, and deliver clear assurance reports and dashboards to senior and board-level stakeholders.

Identify, assess and mitigate cyber risks across the organisation. Ensure adherence to legislation, standards and best practice, and coordinate audit evidence and assurance activities.

Lead the penetration testing programme, managing remediation plans and analysing security data, vulnerabilities and incidents to drive continuous improvement. Implement and monitor KRIs and control effectiveness.

Enhance Incident Preparedness

Develop and lead incident response planning, including tabletop exercises, working closely with operational, technical and information governance teams to improve resilience.

Lead & Develop the Team

Provide leadership, coaching and direction, managing resources and priorities while fostering a high-performing, collaborative culture.

Engage Stakeholders

Build strong relationships across teams, communicate complex risks in a clear, accessible way, and influence decision-making to secure buy-in for security initiatives.

Valuing you. Recognising your dedication. At EPUT, we look after you.

• Receive supervision and support to help you fulfil your potential.
• Join an inclusive EPUT community and connect with others through engagement events and equality or champion networks.
• If you need help, we provide mental health and wellbeing services, occupational health advice and counselling.
• 27 days holiday, plus bank holidays, rising to 33 days after 10 years’ service.
• Excellent pension of up to 14.5% of your pensionable pay.
• Staff discounts include Blue Light Card, NHS discount offers, and staff benefits.
• £8K relocation package if you move to Essex to join us
• Season ticket loans are interest-free to cover the cost of travelling to and from work via tram, rail, or bus.

Work that wraps around your needs

• Job share: Applications for job shares are welcomed.

What we’re looking for:

You’ll be a confident and credible cyber security professional with a strong GRC background and leadership experience in complex environments.

Key skills and experience include:

• Expert knowledge of cyber security, governance, risk, and compliance frameworks
• Strong experience with ISO 27001, CAF, DSPT, COBIT or similar standards
• Proven ability to lead risk management, audits, and assurance programmes
• Experience managing security incidents, vulnerability management, and protective monitoring
• Demonstrable success in leading teams, driving change, and delivering against demanding timescales
• Excellent analytical, problem-solving, and decision-making skills
• Outstanding communication and stakeholder engagement skills, with the ability to influence at senior levels
• Experience working in a large, complex organisation (NHS or public sector desirable)
• Relevant professional certifications (e.g.,CISM, CISA, CRISC, CGRC) or equivalent experience
• Driven, proactive, and resilient under pressure
• Collaborative, flexible, and adaptable to change
• Passionate about cyber security and emerging technologies
• Able to simplify complexity and bring clarity to challenging issues

This is a unique opportunity to shape cyber security governance at scale, influence senior leadership, and make a tangible difference to patient services and organisational resilience.

If you’re ready to lead, innovate, and make an impact — we’d love to hear from you.

This advert closes on Sunday 18 Oct 2026