Senior CISO: Cyber Resilience & Data Governance

Transformation Unit; Liverpool; Hybrid; GBP 94,000 - 109,000; Full time

Job summary

Liverpool University Hospitals NHS Foundation Trust is seeking a strategic Chief Information Security Officer to lead cyber security, digital assurance, and information governance across the group. You will shape the cyber strategy, risk appetite and governance, ensure DSPT, GDPR and Cyber Essentials Plus compliance, and report to the board.

The role covers multi-site operations, incident response, policy development, and building trust with clinical and operational leaders to enable safe,

Qualifications

• Master's degree in Cyber Security or equivalent
• Postgraduate leadership/risk management training or equivalent
• CISSP, CISM, CRISC or ISO 27001 Lead Implementer accreditation
• Public sector/NHS governance knowledge is beneficial

Responsibilities

• Lead development and delivery of the UHL Group cyber security and information governance strategy
• Establish and maintain a Group-wide digital assurance and risk management framework
• Ensure compliance with national and regulatory standards for data protection and cyber security
• Provide strategic leadership on cyber risk, resilience and incident response
• Oversee management of cyber threats, vulnerabilities and security incidents
• Embed security and assurance into all digital programmes and services
• Lead policy development for cyber security and information governance
• Provide expert advice to senior leaders and governance forums
• Develop organisational capability and culture in cyber security and data protection
• Manage relationships with external regulators and assurance bodies

Skills

Complex communication

Negotiation

Board-level engagement

Strategic leadership

Regulatory experience

Supplier management

Education

Master's degree in Cyber Security

Leadership qualification

CISSP/CISM/CRISC

Postgraduate Leadership

Job description

Liverpool University Hospitals NHS Foundation Trust is seeking a strategic Chief Information Security Officer to lead cyber security, digital assurance, and information governance across the group. You will shape the cyber strategy, risk appetite and governance, ensure DSPT, GDPR and Cyber Essentials Plus compliance, and report to the board.

The role covers multi-site operations, incident response, policy development, and building trust with clinical and operational leaders to enable safe,