Cyber Security and Compliance Officer

Job overview

We are seeking an experienced Cyber Security and Compliance Officer to join our digital services team. This senior specialist role is vital in protecting the Trust’s systems and data and ensuring we remain resilient in a rapidly evolving cyber landscape.

You will act as an expert adviser to senior leaders and operational teams, translating complex cyber risks into clear, practical information that supports confident decision-making and helps build a strong security culture.

Collaboration is central to the role. You will work closely with internal teams and external partners to maintain compliance with NHS cyber security standards and best practice, including meeting the requirements of the Data Security and Protection Toolkit (DSPT). You will also work with Information Governance, Data Protection and both clinical and non-clinical teams, as well as contributing to work across the wider North West London collaborative to support a consistent approach to cyber security across partner organisations.

The role may expand to include providing specialist advice beyond CLCH, supporting other members of the North West London community and mental health collaborative. This may involve contributing to joint initiatives that make best use of shared skills and resources.

A key focus will be developing and delivering initiatives that strengthen the Trust’s cyber resilience, including engaging training and awareness activities that help colleagues stay secure, confident and compliant.

Main duties of the job

• Lead on the development, implementation, and ongoing improvement of the Trust’s cyber security framework, ensuring robust and proportionate protections are in place.
• Provide expert, senior-level cyber security advice to Trust leaders and key stakeholders, presenting technical information in a clear, pragmatic and accessible way.
• Ensure full compliance with NHS cyber security standards and best practice, including maintaining and improving the Trust’s standing in the NHS Data Security and Protection Toolkit (DSPT).
• Work collaboratively with Information Governance, Data Protection, clinical and non-clinical teams to deliver a unified approach to cyber security across the organisation.
• Build strong relationships with external partners across the North West London collaborative, contributing to joint initiatives that enhance regional cyber security resilience.

Detailed job description and main responsibilities

Applicants are expected to present clear and relevant evidence of the competencies and responsibilities detailed in the attached Job Description and Person Specification, together with a demonstrated commitment to the Trust’s values of Accountability, Inclusion, Compassion, and Empowerment.

**Please see attached Job Description and Person Specification for full roles and responsibilities.**