Director, Information Technology & Security - Leeds, UK

Civia Health, LLC.; Leeds; On-site; GBP 90,000 - 130,000; Full time

Job summary

Civia Health, a directorate role, leads technology operations, cyber security, and information governance across the UK and US. You will build a secure, scalable environment, align with regulatory needs, and enable growth while empowering colleagues.

You will consolidate operations, establish AI governance, manage budgets and external partners, and serve as an executive advisor on technology investments, resilience, and data strategy.

Qualifications

• 10+ years of progressive technology leadership experience.
• Experience in healthcare, life sciences, or regulated, data-sensitive environments.
• Proven ownership of cyber security, identity and access, endpoint management, incident response, business continuity and disaster recovery.
• Experience leading cloud environments and enterprise applications, with budget and vendor management.
• Knowledge of UK GDPR and data-protection obligations; collaborating with privacy and compliance teams.

Responsibilities

• Lead enterprise IT strategy, infrastructure, cloud services and end-user support.
• Own cyber security strategy, identity and access management, vulnerability management and incident response.
• Maintain IT policies, procedures and audit-ready controls.
• Lead business continuity and disaster recovery planning and executive reporting.
• Oversee governance for AI use, data access, retention and enterprise reporting.
• Travel to UK and US sites as required.

Skills

Leadership

Strategic planning

Cybersecurity

Cloud services

Regulatory compliance

Vendor management

Executive communication

Education

CISSP

CISM

CRISC

ISO 27001 Lead Implementer/Auditor

Tools

Microsoft 365

Cloud infrastructure

Enterprise applications

Job description

SUMMARY

As the Director, Information Technology & Security you will be the senior leader accountable for Civia Health’s technology operations, cyber security, information governance and business systems across the UK and US. You will create a secure, resilient and scalable technology environment that enables growth, protects participant and company information, supports regulatory compliance and improves the day-to-day experience of Civia colleagues. This is a broad, high-impact role that owns the strategy and operating model for IT, cyber security, resilience, business systems and technology governance, while building trusted relationships across the executive team, sites, functions and external partners.

KEY RESPONSIBILITIES

Primary Projects & Outcomes

• Create and execute a multi-year technology, cyber security and resilience roadmap aligned with Civia’s growth strategy.
• Consolidate UK and US IT operations, partners, service levels and governance into a clear global operating model.
• Strengthen identity, device, access, data protection, security testing, incident response and business continuity controls.
• Improve integration, adoption and training across core business systems, telephony, call-centre and clinical support platforms.
• Establish proportionate governance for AI, enterprise data, reporting and future data-warehousing capabilities.

Core Accountabilities

• Lead enterprise IT strategy, infrastructure, cloud services, end-user support, device management and service performance.
• Own cyber security strategy, identity and access management, vulnerability management, penetration testing, incident response and security awareness.
• Maintain IT policies, procedures, acceptable-use and content controls, and the evidence required for audit or inspection.
• Lead business continuity and disaster recovery planning, testing, remediation and executive reporting.
• Manage business systems architecture, integrations, telephony and call-centre platforms, vendor performance, licensing and technology budgets.
• Provide practical governance for approved AI use, data access, retention, classification and enterprise reporting.
• Act as a credible executive adviser on technology investment, operational risk, resilience and digital opportunity.
• Travel to Civia locations and partner sites in the UK and US as business needs require.

EDUCATION AND EXPERIENCE

Required Education and Experience

• 10+ years of progressive technology leadership experience, including responsibility for both IT operations and information security.
• Experience operating in healthcare, life sciences, clinical research or another regulated, data-sensitive environment.
• Proven ownership of cyber security, identity and access, endpoint management, incident response, business continuity and disaster recovery.
• Experience leading cloud and Microsoft 365 environments, enterprise applications, integrations and external managed-service providers.
• Demonstrable ability to translate technical risk into concise commercial advice for executives and boards.
• Experience managing technology budgets, vendor contracts, service levels and multiple priorities across a growing organisation.
• Working knowledge of UK GDPR and data-protection obligations, with the ability to partner effectively with privacy, legal, quality and compliance specialists.
• Willingness to operate at both strategic and hands-on levels in a fast-moving, international business.

Preferred Experience

• Experience supporting operations across both the UK and US.
• Knowledge of GxP, clinical trial systems, health data, sponsor audits or regulated research operations.
• Experience establishing AI governance, enterprise data standards or analytics platforms.
• CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor or a comparable professional qualification.
• Experience supporting acquisitions, new-site integration or rapid organisational scaling.