ICT Head of Cyber Security

ICT Head of Cyber Security

Office:
King's College Hospital NHS Foundation Trust – Denmark Hill

Closing date: 18 June 2026

Overview:
The ICT Head of Cyber Security will act as the Trust’s expert on cyber security protection, detection, response, and recovery. The role sets the strategic direction for cyber threat management and the planning of security solutions, while leading and developing the Trust’s cyber security team.

• Lead strategic planning for current and future IT security solutions, aligning with best practice and emerging technologies
• Collaborate with teams to ensure compliance with security standards
• Lead on internal and external audits and audit preparation relating to IT security
• Maintain compliance with standards including DSPT, CareCERT, Cyber Essentials+, NIS, and ISO 27001
• Act as the Trust’s advisor on cyber security protection, detection, response and recovery
• Develop and advise on implementing policies, procedures, and guidance for cyber and IT security systems and processes
• Advise ICT senior leaders to shape a robust IT security service across the department and its systems
• Monitor incidents and take appropriate actions to correct, notify and prevent reoccurrence
• Work with technical teams to maintain all security tools and technology used in the department
• Work with technical teams to deliver and manage cyber security and compliance across internal and externally hosted systems
• Undertake scoping and delivery of penetration tests and ensure actions are resolved
• Supporting wider IT functions in the evaluation and implementation of new technology and controls
• Defining and documenting a security incident response program
• Respond to high priority NHS Digital Care Cert alerts in line with NHS Digital requirements
• Produce a monthly cyber security KPI report for the Trust Information Governance Committee and ICT senior leaders

• Maintain, update, and implement Trust policies in scope of the ICT department covering all aspects of information security and cyber activities
• Draft, develop, implement and maintain a portfolio of policies relating to all aspects of cyber security within ICT
• Ensure compliance with Trust policy and procedures is fully supported in forums such as the Trust unsupported systems group, the Trust ATP management group, patch management groups and any other future forums
• Provide expertise around Cyber Security for the purchase of new systems and applications via the Trust ICT PMO processes and procurement. Ensure all new systems and applications to be deployed across the estate have a full security review and sign off before proceeding to go-live
• Carry out Continual Service Improvement (CSI) of existing Trust processes and procedures
• Identify, propose and implement changes to practices and procedures required in departmental and user environment to improve service levels
• Ensure that all cyber security risks are updated and managed via the Trust risk and issues process
• Manage the Change Control process within the ICT department
• Revenue and staffing budget holder for IT Security, including procurement of physical assets or supplies and capital expenditure
• Advise departments on the security of IT equipment
• Monitor and advise on software licence compliance in association with the Software Asset Manager
• Advice and guidance on the purchase of IT security equipment
• Exercise duty of care when using Trust equipment (computers and software)
• Advise ICT senior leaders on the most cost‑effective method for maintaining the integrity and security of data and equipment
• Regularly research security developments and requirements on national forums and support from the National Cybersecurity Centre
• Regularly research virus and security alerts provided by NHS information security service
• Keep up to date with developments in IT infrastructure and related technologies
• Contribute to the ICT Cyber‑security approach and strategy
• Undertake surveys and compliance audits determined by legislation and national guidelines using on‑line and developed information systems when necessary, to ascertain scores against the standards
• Line‑manage the technical staff within the cyber‑security…