How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Security Lead
Cyber Security Lead – Doctify
Doctify is the global platform built by doctors for doctors, on a mission to build the largest, most trusted global network of validated healthcare providers and experts. We connect patients with the right doctors, and doctors with respected peers, to ensure better care worldwide. Through verified patient reviews and professional skill endorsements, Doctify creates unmatched credibility for providers and empowers patients to choose care with confidence.
Founded in 2015 and backed by $30m+ in funding, Doctify operates across 7 countries. We are uniting the global healthcare community, one trusted connection at a time.
We do things differently here at Doctify—boldly leading a digital revolution in healthcare—and are confident in our mission.
About the Role
Security is foundational to the trust thatpatients place in our platform and the confidence that healthcare providers invest in their professional reputations. We process sensitive healthcare data across seven countries, operate a complex cloud-native platform, and serve a rapidly growing community of patients and clinicians. Getting security right matters deeply.
We’ve built solid and safe foundations; our cloud infrastructure, identity management, and application security are genuinely secure. Now we’re looking for a Cyber Security Lead to:
- Own security across the organisation
- Close the gaps that remain
- Set us on a clear trajectory toward best-in-class security posture
This role is for a hands-on leader with the vision and ambition to grow into a CISO as Doctify continues to scale.
You’ll work closely with:
- The COO on operational security priorities
- The VP Engineering on technical architecture and DevSecOps
- The full business on security culture
Depending on your approach and the business’s needs, you may:
- Lead a small internal team (DevSecOps and/or IT/endpoint)
- Manage outsourced security partners
Key Responsibilities
Strategic Leadership & Ownership
- Own and deliver a comprehensive, prioritised security plan, translating Doctify’s risk profile into a clear programme of work to achieve best-in-class security maturity
- Report progress to executive and board level
Endpoint Security & Device Management
- Design and implement enterprise-grade endpoint protection, including:
- EDR (Endpoint Detection & Response)
- Mobile device management (MDM)
- Patch management
- Device trust controls
- Balance security rigour with a user-friendly approach
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Security Operations & Visibility
- Build out Doctify’s security operations capability:
- Integrate a SIEM (Security Information & Event Management)
- Centralise security event logging
- Establish an active security review process (internal function or managed SOC partner)
Cloud & Platform Security
- Own and continuously improve security of AWS and Google Workspace environments:
- Apply CIS benchmarks and industry frameworks
- Ensure cloud posture aligns with platform growth
Application & Data Security Architecture
- Partner with the VP Engineering and engineering teams to embed security in the SDLC, including:
- Threat modelling
- Code review standards
- Secure data handling practices for sensitive patient and clinician information
Governance, Risk & Compliance
- Maturity Doctify’s security governance framework:
- Maintain Cyber Essentials certification
- Formalise risk management methodology
- Manage the risk register
- Drive alignment with ISO 27001 or equivalent
Identity & Access Management (IAM)
- Strengthen IAM across the organisation:
- Improve SSO (Single Sign-On) centralisation
- Enhance access controls & privileged access management
- Protect both internal systems and core doctor/patient products
Security Awareness & Culture
- Champion security across the whole business:
- Design and run training programmes
- Conduct phishing simulations
- Facilitate regular communications to build awareness
- Foster a culture of shared ownership
Incident Response & Business Continuity
- Own Doctify’s incident response capability:
- Ensure detection, containment, and recovery from security events
- Develop and test clear playbooks & procedures
- Establish communication protocols
Vendor & Third-Party Security
- Define and apply security requirements in supplier relationships
- Manage third-party risk
- Oversee outsourced security functions
Patient & Clinician Data Protection
- Own obligations around healthcare data security
- Partner with Trust & Legal functions on:
- GDPR compliance
- Data handling standards
- Regulatory posture
About You
✅ Senior Security Experience: Strong track record in senior security roles—ideally in a SaaS, healthtech, or data-intensive scale-up—and ready for full organisational ownership.
✅ Technical Breadth: Broad expertise across:
- Cloud security (AWS, Google Workspace)
- Endpoint protection
- Application security
- Identity management
- Security operations
Get help with your application
Your very own career expert that helps elevate your application to the next level.
✅ Leadership Potential: Ambitious and strategic, with a roadmap-focused mindset. Feel comfortable building a team and holding partners accountable while staying hands-on.
✅ Communication Mastery: Ability to translate complex security challenges into clear language for executive leadership, board members, and non-technical teams.
✅ Pragmatic, Adaptable & Fast: Skilled at making sound, proportionate decisions in a high-growth environment with shifting priorities.
✅ Regulated Environment Experience: Strong advantage if you’ve worked in a regulated sector, particularly with sensitive healthcare or personal health data.
✅ Location & Flexibility: Based in the UK, with ability to work from the London office on a hybrid basis.
✅ Passion for Purpose: Demonstrates genuine care for patients and doctors, translating passion into daily work.
What We Offer
At Doctify, we shape careers with purpose. Our benefits fuel your growth, flexibility, and wellbeing.
🌴 Time Off, Flexibility & Balance
- 28 days annual leave (25 + 3 between Christmas/New Year)
- Can earn up to 30 days with tenure
- 2 weeks remote work annually (within a 3-hour time zone of HQ)
- Hybrid working model
- Enhanced Parental Leave
- Medicash (health cash plan)
⭐ Setting You Up for Success
- Benchmarked, competitive compensation
- 3-month immersive onboarding experience
- Ongoing learning through:
- Expert-led sessions
- Leadership insights
- Soft-skill development
- Clear internal mobility pathways for career acceleration
💙 The Uniquely Doctify Experience
- Daily team huddles (connect, share wins, spark ideas)
- Regional Lunch Clubs & team socials (powered by our Fun Police)
- Quarterly Doctifier-nominated Impact Awards
- £700 referral bonus per successful hire
🌍 Our Commitment to DEIB
Diversity, equity, inclusion, and belonging (DEIB) are core principles at Doctify. These values shape:
- How we work
- How we build teams
- How we design policies
- How we deliver our mission
We believe diverse perspectives drive innovation—and better outcomes for patients, providers, and each other.
If you need adjustments during the hiring process, we’re happy to accommodate. Reach out at hiring@doctify.com.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location