Chief Information Security Officer

At NHS Blood and Transplant, secure and resilient data and technology help connect the generosity of donors with patients whose lives depend on our services. From blood and plasma to organs, tissues, stem cells and specialist diagnostics, our technology underpins services that save and improve lives every day.

We are seeking an exceptional Chief Information Security Officer to lead some of our most important cyber security, information governance and resilience capabilities.

Working with the Executive team and leaders across the organisation, you will set the strategic direction for cyber and information security, information governance and records management.

You will provide a critical role in strengthening organisational resilience, and provide authoritative advice and assurance to senior leaders and Board committees, in an increasingly complex and volatile risk landscape.

This is a highly influential leadership role at the heart of an organisation delivering nationally critical services, where security, trust and resilience are critical. You will balance security, risk and regulatory requirements with the need to enable innovation and transformation, ensuring NHSBT can embrace new opportunities safely and confidently., Your duties will include:

• Lead NHSBTs cyber security strategy, ensuring it responds to evolving threats and supports organisational priorities.
• Oversee Cyber, Information Security, Data Privacy and Records Management, ensuring effective controls, governance and assurance to protect critical services and information.
• Advise the Executive team and Board committees on cyber threats, vulnerabilities, risks, regulatory requirements and investment priorities.
• Strengthen cyber resilience, ensuring NHSBT can prevent, respond to and recover from significant cyber incidents.
• Promote an organisation-wide security culture, embedding shared responsibility and informed risk management.
• Lead cyber and information security governance, risk and compliance, including GDPR, DSPT, CAF and DHSC requirements, ensuring regulatory compliance and audit readiness.
• Lead and develop a diverse, inclusive, high-performing team with the skills to address current and future challenges.
• Build strategic relationships with government, NHS partners, regulators, national cyber bodies and suppliers, sharing intelligence, expertise and best practice., What we offer:
• Hybrid working arrangements - because NHSBT works nationally, we’re able to offer hybrid working options that give you more flexibility to balance work with life.
• Flexible working options - we promote flexible working where the role allows. We’re happy to discuss what flexibility might look like for you.
• Generous annual leave - 27 days annual leave (pro rata for part-time) plus Bank Holidays, increasing to 29 days after 5 years’ service and to 33 days after 10 years.
• Inclusive pension scheme - the NHS Pension Scheme is a defined benefit scheme (not dependent on investment returns). Further details and outline of benefits can be found at: http://www.nhsbsa.nhs.uk/information-about-nhs-pensions
• Supportive learning culture - we’ve fostered a culture of continuous learning where colleagues are well-led, engaged, and encouraged to grow. We support you in reaching your full potential, both in your current role and future career. Our Thrive program embodies our commitment to learning and development, offering a wide range of activities to support your personal and professional growth. It’s open to everyone at NHSBT, ensuring you have the resources to succeed and shine in your role.
• Health and wellbeing support - we offer confidential services including occupational health, employee assistance programme, and wellbeing resources. Our support is available to all colleagues and we endeavour to provide tailored workplace adjustments where possible.

• Educated to masters level in a digital, IT, security or related subject or significant operational and strategic cyber, information security and digital leadership experience.
• Holds an appropriate recognised cyber or information security qualification or professional registrationfor example CISSP, CISM, CCISO, Chartered Cyber Security Professional or equivalentor demonstrates comparable expertise through substantial senior experience.
• Demonstrate commitment to continuous personal learning, * Deep knowledge and practical application of relevant regulatory requirements, including DSPT-CAF, NCSC guidance, ISO 27001 principles, GDPR, the Data Protection Act 2018 and information governance requirements
• Significant experience of successfully developing information and cyber security strategies and leading the delivery of associated technical services, solutions and integrated partnership working.
• Expert knowledge of cyber resilience and operational security, including threat management, security architecture, IAM, vulnerability management, security operations, incident response, business continuity and disaster recovery across critical or Essential Services environments.
• Significant experience of assuring organisational capability to identify, protect against, detect, respond to and recover from cyber incidents, including exercising and continuous improvement.
• Significant experience leading crisis management and integrating cyber security with Enterprise Risk Management and organisational business resilience.
• Significant leadership experience across cyber security, information governance, data protection and assurance functions, including capability building, professional standards and management of scarce specialist skills.
• Experience of decision-making and delivery in a changing environment.
• Extensive experience in developing, procuring, implementing and supporting complex regulatory system change.
• Significant experience of working with 3rd party technology and application providers and undertaking complex contract negotiation.
• Experience of successfully delivering priorities in collaboration with a range of stakeholders and partners.
• Demonstrable experience of managing significant operational revenue and multi-million capital investment programmes.
• Experienced in leading, building and delivering programmes through to successful delivery.
• Significant experience leading people and capabilities across multi-disciplinary, specialist teams, alongside contractor resources and strategic suppliers.
• Demonstrable commitment and in-depth experience to people leadership and staff development and progression.

It takes all types of people to deliver the kind of service that saves and improves lives. At NHS Blood and Transplant, youll join a team of more than 6,000 people who are making a genuine difference to communities, families, friends, relatives and more across the UK. We play a unique and special role in the NHS by helping people do something extraordinary- donate blood, blood products, organs, tissues, or stem cells to save someone in need.