Cyber Security Manager

Are you an experienced Cyber Security professional looking to lead and shape cyber security across one of the largest NHS Trusts in the Midlands?

We are seeking an experienced and motivated IT & Cyber Security Manager to lead the Trust's cyber security function and help protect the digital services that support patient care across our five hospital sites.

Role Overview

Reporting to the Assistant Director of Digital Services – Technology, you will act as the Trust's subject matter expert for IT and Cyber Security. You will lead the development and implementation of cyber security policies and standards, coordinate responses to cyber security incidents, and provide expert advice and guidance across the organisation.

Key Responsibilities

• Work closely with NHS England, regional cyber teams, suppliers, and internal stakeholders to maintain compliance with national cyber security requirements, deliver the Data Security and Protection Toolkit, manage cyber risk, and improve the Trust's security posture.
• Lead the Trust's IT and Cyber Security function, providing expert advice and guidance on cyber security risks, controls, policies, and compliance requirements.
• Act as the Trust's technical lead for cyber security incidents and investigations, working with internal teams, NHS partners, and external suppliers to protect critical systems and services.
• Develop, implement, and maintain cyber security policies, standards, and procedures, ensuring the Trust remains compliant with national NHS cyber security requirements and the Data Security and Protection Toolkit (DSPT).
• Act as a lead on the cyber parts of the annual CAF DSPT submission.
• Lead and Chair specific Cyber related meetings, organise quarterly desktop exercises, and lead on a variety of cyber exercises.
• Provide leadership to the Cyber Security team, managing staff, supporting professional development, and driving continuous improvement across cyber security services.
• Work closely with Digital Services, Information Governance, clinical teams, and senior stakeholders to assess and manage security risks, support secure delivery of digital transformation programmes, and maintain the resilience of the Trust's technology estate.