How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Security Lead
Security Leadership Opportunity – Cyber Security Lead at Doctify
About Us
We’re Doctify Doctify is the global platform built by doctors for doctors, on a mission to build the largest, most trusted global network of validated healthcare providers and experts. We connect patients with the right doctors and doctors with respected peers, ensuring better care worldwide.
Through verified patient reviews and professional skill endorsements, we create unmatched credibility for providers and empower patients to choose care with confidence.
Founded in 2015 and backed by $30m+ in funding, Doctify operates across 7 countries, uniting the global healthcare community—one trusted connection at a time. We do things differently here by boldly leading a digital revolution in healthcare and confidently executing our mission.
About the Role
Security is the foundation of trust that patients place in our platform and the confidence that healthcare providers invest in their reputations. We process sensitive healthcare data across seven countries, operate a complex, cloud-native platform, and serve a rapidly growing community of patients and clinicians.
Getting security right matters deeply.
We’ve built a strong starting point: our cloud infrastructure, identity management, and application security are genuinely secure. Now, we’re looking for a Cyber Security Lead—a hands-on leader with the vision and ambition to scale our security capabilities—and yes, this could grow into a Chief Information Security Officer (CISO) role as we continue to scale.
In this executive-level role, you’ll:
- Work closely with the COO on operational security priorities.
- Partner with the VP Engineering on technical architecture and DevSecOps.
- Engage the full business to foster a security-aware culture.
You may lead a small internal team (DevSecOps and/or IT/endpoint) and/or manage outsourced security partners.
Responsibilities
Security Leadership, Strategy & Roadmap
- Own and deliver a comprehensive, prioritised security plan, translating Doctify’s risk profile into a clear security roadmap.
- Report progress to executive and board level and drive best-in-class security maturity.
Endpoint Security & Device Management
- Design and implement enterprise-grade endpoint protection, including EDR (Endpoint Detection & Response), mobile device management (MDM), patch management, and device trust controls.
- Balance security rigour with a practical, user-friendly approach.
Security Operations & Visibility
- Build out Doctify’s SOAR (Security Operations & Analytics) capabilities, integrating SIEM (Security Information & Event Management), centralising security event logging, and establishing an active security review process—whether through an internal function or managed SOC partner.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Cloud & Platform Security
- Own and continuously improve the security of AWS and GoogleWorkspace environments.
- Apply CIS benchmarks, industry frameworks, and ensure the cloud posture keeps pace with the platform’s growth.
Application & Data Security Architecture
- Partner with VP Engineering and the engineering teams to embed security in the Software Development Lifecycle (SDLC)—from threat modelling, code review standards, to secure data handling practices that protect sensitive patient and clinician information.
Governance, Risk & Compliance
- Maturate Doctify’s security governance framework.
- Maintain Cyber Essentials certification and formalise risk management methodology.
- Manage the risk register and drive toward ISO 27001 compliance or equivalent.
Identity & Access Management (IAM)
- Strengthen IAM across the organisation, improving SSO centralisation, access controls, and privileged access management to protect both internal systems and our patient and doctor-facing products.
Security Awareness & Culture
- Champion security across the entire business—designing and running training programmes, phishing simulations, and regular security communications to foster a culture of shared ownership.
Incident Response & Business Continuity
- Own Doctify’s Incident Response (IR) capability, ensuring the organisation can detect, contain, recover from security events effectively.
- Develop clear playbooks, test procedures, and communication protocols.
Vendor & Third-Party Security
- Define and apply security requirements in supplier relationships, managing third-party risk, and overseeing the performance of any outsourced security functions.
Patient & Clinician Data Protection
- Take ownership of patient and clinician data security and collaborate closely with Trust and Legal functions on:
- GDPR compliance.
- Data handling standards.
- Broader regulatory posture.
About You
You are an ambitious security leader ready for the next step—hands-on ownership, strategic thinking, and growth potential into a CISO role.
- Technical expertise: Broad depth across AWS, Google Workspace, endpoint protection (EDR, MDM), application security (threat modelling, code reviews), identity management (IAM/SSO/zero trust), and security operations (SIEM/MS$ SOC architecture).
- Hands-on & pragmatic: Able to make sound, proportionate decisions at scale, adapt to shifting priorities in a fast-paced environment, and balance long-term vision with immediate execution.
- Excellence with frameworks: Deep familiarity with Cyber Essentials, ISO 27001, CIS Benchmarks, NIST, and UK GDPR.
- Regulatory experience: Preference for healthcare or PHI (Personally Identifiable Health Information) experience.
- Location & work arrangements: Based in the UK and able to commute to our London office on a hybrid basis.
- Leadership & team collaboration: Proven ability to build, manage, and mentor teams, hold outsourced partners accountable, and combine strategic vision with detailed oversight.
- Purpose-driven: Genuinely passionate about protecting patients and doctors—you bring that purpose and care to every day.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
What We Offer
At Doctify, we shape careers with purpose. Our benefits encourage growth, flexibility, and wellbeing:
🌴 Time Off, Flexibility & Balance
- 28 days annual leave (25 days + 3 between Christmas and New Year), with the potential for up to 30 days with tenure.
- 2 weeks annual remote working (within a 3-hour time zone of HQ).
- Hybrid working model.
- Enhanced Parental Leave benefits.
- Medicash health cash plan.
⭐ Setting You Up for Success
- Competitive, benchmarked compensation.
- 3-month immersive onboarding experience to integrate you smoothly.
- Ongoing learning through:
- Expert-led sessions.
- Leadership insights.
- Soft-skill development.
- Clear internal mobility pathways to accelerate your career growth.
💙 The Uniquely Doctify Experience
- Daily team huddles to connect, share wins, and spark ideas.
- Regional Lunch Clubs and team socials (powered by our Fun Police).
- Quarterly Doctifier Impact Awards celebrating exceptional contributions.
- Employee referral bonus: £700 (or local equivalent) per hire.
🌍 Our Commitment to DEIB (Diversity, Equity, Inclusion & Belonging)
DEIB isn’t just policy—it’s core to our organisational identity. Diversified perspectives drive innovation and better outcomes for patients, providers, and our team.
We’re committed to equitable, inclusive workplaces where everyone feels heard, respected, and empowered to thrive.
Security Play Certificate – If you.need any accommodations during the hiring process, contact us at hiring@doctify.com—we’re happy to help.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills