# Chief Information Security Officer (CISO) > NHS job listing from Job Clerk for Liverpool University Hospitals NHS Foundation Trust. ## Canonical URLs - **HTML:** https://www.jobclerk.com/job/chief-information-security-officer-ciso/aa521ff9-05e6-4b94-8f98-6be0e7308297 - **Markdown:** https://www.jobclerk.com/job/chief-information-security-officer-ciso/aa521ff9-05e6-4b94-8f98-6be0e7308297.md ## Summary - **Status:** Live - **Employer:** Liverpool University Hospitals NHS Foundation Trust - **Location:** Royal Liverpool University Hospital - **Workplace type:** onsite - **Profession:** Administrative and IT - **Grade:** Band 8 - **Salary:** £94,356 - £108,814 per annum - **Contract type:** Permanent - **Employment type:** Full time - 37.5 hours per week - **Closing date:** 2026-11-12T23:59:00.000Z - **Posted:** 2026-10-29T13:30:44.064Z - **Source information URL:** https://www.healthjobsuk.com/job/UK/Merseyside/Liverpool/Liverpool_University_Hospitals_NHS_Foundation_Trust/Information_Security/Information_Security-v8024487 - **Application URL:** https://apps.trac.jobs/job-advert/8024487?ShowJobAdvert=&feedid=9002 - **Employer website:** https://www.liverpoolft.nhs.uk ## Job Content ### Job overview The Chief Information Security Officer is a senior Group leadership role within Group Digital Services, accountable for leading a coherent, resilient and risk-based cyber security function across the UHL Group. The postholder will provide strategic leadership for cyber security, digital assurance and security governance, ensuring that the Group’s digital estate, information assets and critical services are protected in a way that supports safe, effective and sustainable care delivery. The role will operate within the group-wide Digital TOM, where cyber security, information governance and digital risk management are brought together through a unified assurance framework to reduce variability, strengthen resilience and ensure compliance with national standards. Working across the UHL Group’s multi-site environment, the postholder will translate national policy, strategic ambition and technical assurance requirements into practical controls, operating models and leadership behaviours that enable digitally enabled transformation. The role will support the UHL Group’s five-year ambition to make best use of digital and data, contribute to the analogue-to-digital shift described in the national 10-year plan, and ensure that innovation, interoperability, patient trust and clinical safety are underpinned by robust cyber resilience, secure digital design and proportionate assurance. ### Main duties of the job The CISO will establish a Group-wide cyber and information governance framework for the UHL Group. You will shape cyber strategy, define risk appetite, influence investments, and interface directly with boards to embed security, resilience, and compliance into all digital service delivery. This includes delivering comprehensive cyber assurance, information governance, and digital risk management while ensuring strict compliance with DSPT, GDPR, and Cyber Essentials Plus. To succeed, you must translate these expectations into a robust operational capability. This involves leading incident response, forensic activity, privacy assessments, access controls, and breach investigations, ensuring clear accountability across all sites. Crucially, you will need to align with the UHL Group Target Operating Model by balancing Group-wide security standardisation with practical, locally responsive solutions tailored to individual hospitals and services. Ultimately, success depends on building trusted relationships with clinical and operational leaders so that security is viewed as a core enabler of safe care rather than a barrier. By protecting patient confidentiality and fostering trust, the role directly supports the UHL Group’s five-year analogue-to-digital transformation, enabling the secure rollout of the single patient record, seamless data sharing, interoperability, and future AI adoption. ### Detailed job description and main responsibilities Lead the development and delivery of the UHL Group cyber security and information governance strategy Establish and maintain a Group-wide digital assurance and risk management framework Ensure compliance with national and regulatory standards for data protection and cyber security Provide strategic leadership on cyber risk, resilience and incident response Oversee the management of cyber threats, vulnerabilities and security incidents Embed security and assurance into all digital programmes and services Lead the development of policies, standards and procedures for cyber security and information governance Provide expert advice and assurance to senior leaders and governance forums Develop organisational capability and culture in cyber security and data protection Manage relationships with external regulators, partners and assurance bodies ## Person Specification ### Skills **Essential** - Ability to communicate highly complex, sensitive or contentious information to senior leaders and large stakeholder groups where barriers to acceptance may exist - Advanced negotiation, influencing and relationship management skills in highly regulated and politically sensitive environments - Ability to formulate long-term organisational strategies covering cyber security, information governance, assurance and resilience - Highly developed analytical and judgement skills involving interpretation of complex technical, legal, financial and organisational information **Desirable** - Board-level presentation and stakeholder engagement experience - Strategic supplier management, assurance review and regulatory inspection experience ### Knowledge **Essential** - Advanced knowledge of cyber security, information governance, digital assurance and organisational risk management - Extensive knowledge of data protection, records management, confidentiality, cyber resilience, information assurance and regulatory compliance - Knowledge of Microsoft 365, Azure, identity management, cloud security, security operations and enterprise technology governance - Knowledge of digital transformation, assurance frameworks and security-by-design principles **Desirable** - Knowledge of NHS information governance requirements and national digital policy - Knowledge of enterprise architecture, operational resilience and technology assurance methodologies ### Experience **Essential** - Significant senior leadership experience managing multiple services relating to Cyber Security, Information Governance, Information Assurance or Digital Risk within a large and complex organisation - Experience developing and implementing organisation-wide cyber security, information governance and assurance strategies - Experience managing substantial budgets, specialist teams and complex supplier relationships across multiple service functions - Experience analysing highly complex organisational, regulatory, technical and risk issues requiring evaluation of multiple options and strategic decision-making **Desirable** - Experience operating within a large NHS organisation or integrated healthcare environment - Experience leading enterprise=scale cyber resilience, assurance or regulatory compliance programmes ### Qualifications **Essential** - Master's degree in Cyber Security, Information Security, Information Governance, Digital Leadership, Computer Science or related discipline, or demonstrable knowledge and operational experience to an equivalent level - Advanced theoretical and practical specialist knowledge acquired through degree-level study, supplemented by postgraduate specialist training, management qualifications and substantial strategic leadership experience, or demonstrable knowledge and operational experience to an equivalent level **Desirable** - CISSP, CISM, CRISC, ISO 27001 Lead Implementer, Data Protection Practitioner or equivalent professional accreditation - Postgraduate qualification in Leadership, Governance, Risk Management, Organisational Development or related discipline ## Documents - [risk id (pdf, 344.6kb)](https://www.healthjobsuk.com/documents?vdoc=10322232) - [life at luhft benefits (pdf, 333.2kb)](https://www.healthjobsuk.com/documents?edoc=2664) - [job description & person specification (pdf, 215.1kb)](https://www.healthjobsuk.com/documents?vdoc=10722306) ## Agent Notes - This Markdown page is generated from the same Job Clerk job record as the HTML job detail page. - Use the canonical HTML URL for user-facing references. - Use the application URL when the user wants to apply on the source NHS site.