
Search for more jobs in Manchester
Job requirements
Requirements from the employer’s person specification. These describe the role, not your personal match.
Essential
41 listedRequirements the employer expects applicants to meet.
- Other
Evidence of planning and delivering programmes and projects and services on time.
- Other
Team working skills.
- Other
Ability to move between details and the bigger picture.
- Other
Previously responsible for a budget, involved in budget setting and working knowledge of financial processes.
- Other
Demonstrates honesty and integrity and promotes organisational values.
- Other
Embrace change, viewing it as an opportunity to learn and develop.
- Other
Ability to work without supervision, providing specialist advice to the organisation, working to tight and often changing timescales.
- Other
Interpreting national policy for implementation.
- Knowledge
Highly developed and expert knowledge of digital best practice and procedures.
- Knowledge
Excellent understanding of information security and information governance.
- Knowledge
Extensive working knowledge of current practices and issues in the cyber field.
- Knowledge
Strong communication skills and the ability to negotiate, influence and facilitate effective interaction with key stakeholders and suppliers.
- Knowledge
Developed communication skills for delivering key messages to a range of stakeholders both internal and external (including outside the NHS) to the organisation, some at very senior level.
- Knowledge
Good presentation skills for conveying complex concepts.
- Knowledge
Ability to use informed persuasion to influence others.
- Knowledge
Able to communication complex technical information to not technical people using simple, explanatory language that is understandable.
- Experience
Extensive experience of both imputing into and formulating short, medium and long term strategic plans and policies.
- Experience
Extensive experience of project and change management skills and/or techniques.
- Experience
Extensive experience of all aspects of people management, from recruitment to dealing with disciplinary matters.
- Experience
Substantial experience of working to tight KPI’s/targets with the ability to work well under pressure to achieve these.
- Experience
Experience of working in a large and complex multi-tiered environment.
- Experience
Highly developed specialist knowledge, underpinned by theory and experience.
- Experience
Previous experience of strategy planning and development for IT architectures.
- Experience
Extensive experience of cyber/architectural analysis, design, development, procurement and deployment.
- Experience
Extensive knowledge of IT infrastructures, systems and management processes acquired through post graduate diploma or equivalent experience or training plus further specialist knowledge or experience to master’s level or equivalent.
- Experience
Evidence of post qualifying and continuing professional development.
- Experience
Broad and detailed knowledge of IT infrastructure, architecture, software and systems.
- Experience
A firm understanding of design, optimisation, deployment and management processes of network and hardware infrastructures.
- Experience
Knowledge and experience of development architecture life cycles and governance processes.
- Experience
Must understand the background to and aims of current healthcare and appreciate the implications of this on engagement
- Experience
Should have an appreciation of the relationship between NHS England, commissioning, provider and support organisations.
- Experience
Good concentration skills, required to concentrate for prolonged periods to analyse highly complex IT information and meet multiple demands on an ongoing and daily basis
- Experience
Ability to work out-side normal office hours and participate on an on-call rota.
- Competencies
Excellent analytical and problem-solving skills.
- Competencies
Exceptional communication skills in order to convey highly complex and highly sensitive digital / cyber issues to a non-digital / cyber audience
- Competencies
Good judgement necessary to choose the best solution from complex architectures with a range of options.
- Competencies
Ability to identify risks, anticipate issues and create solutions and to resolve problems in relation to project or service delivery.
- Competencies
Ability to understand a broad range of complex information quickly and making decisions where opinions differ/no obvious solution.
- Competencies
Acknowledged as an expert in cyber security.
- Qualifications
Minimum of a Masters degree level qualification relevant to the role or demonstrable equivalent level of experience.
- Qualifications
Specialist cyber related qualification.
Desirable
3 listedAdditional qualities the employer would prefer.
- Experience
Previous experience of working in digital in the NHS or a healthcare setting.
- Experience
Previous experience of managing a function comprising of multiple teams.
- Professional Registration
Registered member of professional informatics body such as UKCHIP, BCS, Assist etc.
Job overview
The Assistant Director of Cyber Security, Governance, Compliance & Risk provides senior leadership and strategic direction for the organisation’s cyber security function. The post holder is accountable for developing, implementing, and continuously improving a comprehensive, outcome-focused cyber security programme that protects the confidentiality, integrity, availability, safety, privacy, and recoverability of all information assets across the organisation and wider GM system.
As the lead expert and highest point of escalation, you will own the end-to-end cyber governance, risk management, and compliance agenda. This includes formulating and maintaining the overarching cyber strategy, policies, standards, and control frameworks (aligned to short-, medium-, and long-term organisational objectives), while ensuring consistent application organisation-wide. Key responsibilities encompass leading threat intelligence and assessment activities, conducting complex risk assessments, maintaining risk registers, devising and prioritising mitigations, and integrating cyber risk into the wider organisational risk management process.
This senior leadership role demands exceptional strategic vision, expert technical knowledge, advanced stakeholder management, and the ability to navigate highly complex, multi-faceted information in a large-scale environment to drive cyber resilience and support the organisation’s mission.
Main duties of the job
- Be the lead expert in your field, providing expert advice, leadership and being the highest point of escalation for the team.
- Be responsible for all aspects of cyber governance, risk and compliance.
- You will implement and monitor a strategic, comprehensive information security cyber program to ensure appropriate levels of confidentiality, integrity, availability, safety, privacy and recovery of information assets owned, controlled or/and processed.
- Have responsibility for ensuring adherence to mandated requirements around DSPT toolkit and ensuring the organisation is compliant with UK Regulations.
- Hold overall responsibility for the compliance of organisational wide information security systems.
- Be responsible for the overall cyber strategy, formulating, adjusting and ensuring the delivery of plans as necessary, across the short, medium and long term.
- Be responsible for and lead on threat intelligence and threat assessment for the organisation.
- Be responsible for and ensure compliance with Cyber Essentials/Cyber Essentials plus and with the ISO 27000 series of standards.
- Lead the cyber function, holding overall responsibility for all aspects of people management.
Detailed job description and main responsibilities
KEY DUTIES AND RESPONSIBILITIES
- Be the lead expert in your field, providing expert advice, leadership and being the highest point of escalation for the team.
- Be responsible for all aspects of cyber governance, risk and compliance. You will implement and monitor a strategic, comprehensive information security cyber program to ensure appropriate levels of confidentiality, integrity, availability, safety, privacy and recovery of information assets owned, controlled or/and processed.
COMMUNICATION
- Presents highly complex, sensitive or technical information about projects, initiatives and services to a wide range of stakeholders in a formal setting.
- Required to explain highly complex technical issues in a simple, non-technical manner for customers
INFORMATION RESOURCES, ANALYSIS AND DECISION MAKING
- The post holder is responsible for the development, maintenance, and interpretation of highly complex cyber security information resources, including strategic risk registers, threat intelligence reports, maturity assessments, metrics dashboards, control assurance evidence, and compliance documentation (e.g., DSPT toolkit submissions, Cyber Essentials assessments, ISO 27001-aligned frameworks).
WhatsApp job alerts
Get instant WhatsApp alerts for Band 8 Manager and Corporate roles in Manchester
Create your Job Clerk account first. We'll collect your alert preferences during onboarding and help you turn on WhatsApp notifications for matching healthcare roles.
Applying for this NHS job
This advert is for Assistant Director of Cyber Security, Governance, Compliance & Risk with NHS Greater Manchester Integrated Care in Manchester, England. It is listed as a Band 8 Quality and governance manager role. The advertised salary is £79,504 - £91,609 pa. The contract type is Permanent. The application deadline is 20 Sep 2026.
Before you apply, compare the job description with the person specification and mirror the employer's essential criteria in your supporting information. Use the vacancy title, employer, location, salary, contract type, closing date and posted date (04 Sep 2026) to decide whether this role fits your current NHSjob search. If the employer can close applications early, prepare the application before the stated deadline rather than waiting for the final day.
For more context, review related Job Clerk pages for the same profession, band or location where they exist, then use the application-support guides to tailor your statement and prepare for interview.
