Head of Security

Royal Berkshire NHS Foundation Trust; Reading; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading healthcare organization in the UK is seeking a Head of Security to drive its cyber and information security strategy. This senior role involves managing risk and resilience planning while ensuring compliance with critical security frameworks. The ideal candidate will provide expert advice, lead internal audits, and promote a culture of continuous improvement. Suitable for those with significant experience in cyber security and a strong ability to collaborate with stakeholders.

Qualifications

• Proven experience in cyber and information security leadership.
• Ability to manage complex security operations within healthcare.
• Strong understanding of compliance standards like ISO27001.

Responsibilities

• Lead the Trust's cyber and information security strategy.
• Develop risk management and resilience planning.
• Provide strategic advice on emerging cyber threats.

Skills

Cyber security strategy development

Risk management

Compliance with national frameworks

Stakeholder management

Budget management

Training and development

Job description

We are seeking an experienced and visionary Head of Security to lead the Trust's cyber, information security, resilience, and governance strategy. This senior leadership role sits within the Digital Data & Technology (DDaT) team and plays a critical part in safeguarding patient and organisational data, enabling secure digital transformation, and aligning local strategies with IC&S and national initiatives. The postholder will act as the Deputy Senior Information Risk Owner (SIRO) and provide strategic and operational leadership across architecture, infrastructure, live services, cyber security, and information governance.

• Develop and implement a comprehensive cyber and information security strategy across the Trust and IC&S.
• Lead risk management, resilience planning, and compliance with national frameworks including ISO27001, DSPT, and Cyber Essentials+.
• Provide expert advice to senior stakeholders and technical teams on emerging threats and mitigation strategies.
• Chair assurance groups and lead internal audit controls for DDaT security.
• Collaborate with Emergency Preparedness teams to ensure cyber threats are integrated into resilience planning.
• Manage budgets, business cases, and funding proposals for cyber initiatives.
• Promote a culture of continuous improvement, training, and professional development across the security function.
• Deputise for the Associate Director of Digital Operations when required.

Diversity makes us interesting... Inclusion is what will make us outstanding. Inequality exists and the journey to eliminate it is not easy. Every step we take will be a purposeful step forward to deliver a truly inclusive culture where all our people are enabled to deliver outstanding care, where background is no barrier, and where everyone can be their authentic self and we truly represent our patient community.