Employer: Oxford University Hospitals NHS Foundation Trust
Job Title: Head of Cyber Security
Location: Oxford, United Kingdom
Salary: £76,965 to £88,682 per annum
Job Type: Full-time
Closing Date: 22 January 2026
Job Summary
The Head of Cyber Security will lead the Trust’s cyber security strategy, governance, and operations. This senior leadership role ensures the confidentiality, integrity, and availability of Oxford University Hospitals NHS Foundation Trust’s (OUH) digital assets and information systems.
The post holder will act as the authoritative voice on cyber security, representing OUH in regional and national forums. They will ensure that the Trust’s cyber posture aligns with NHS frameworks such as DSPT, CAF, and ISO 27001.
Main Duties of the Job
The Head of Cyber Security is responsible for:
-
Cyber Security Strategy: Shape and execute the Trust’s cyber security strategy to ensure digital assets and information systems remain secure, resilient, and compliant with NHS frameworks (DSPT, CAF, ISO 27001).
-
Strategic Leadership: Develop and implement cyber security plans, lead maturity assessments, and provide board-level assurance on risk and compliance.
-
Representation: Act as the Trust’s representative in key regional and national cyber forums to align local priorities with broader NHS initiatives.
-
Governance and Risk Management: Oversee the Information Security Management System (ISMS), lead audits, chair assurance groups, and support data protection compliance as Deputy SIRO.
About Oxford University Hospitals NHS Foundation Trust
Oxford University Hospitals NHS Foundation Trust is one of the largest NHS teaching trusts in the country. It provides a wide range of general and specialist clinical services and serves as a hub for medical education, training, and research.
The Trust comprises four hospitals:
-
John Radcliffe Hospital
-
Churchill Hospital
-
Nuffield Orthopaedic Centre (Headington)
-
Horton General Hospital (Banbury)
OUH’s approach to care is guided by its values, standards, and behaviours under the framework of Delivering Compassionate Excellence, focusing on:
-
Compassion
-
Respect
-
Learning
-
Delivery
-
Improvement
-
Excellence
For more information, view OUH At a Glance.
Person Specification
Qualifications
Essential:
-
Master’s degree in a relevant subject or equivalent experience
-
Specialist qualifications in ICT and/or Cyber Security (e.g., CISSP, CISM, CRISC)
Desirable:
-
Commitment to ongoing specialist training to support role and self-development
Experience
Essential:
-
Senior leadership in cyber security within an NHS or complex public sector environment
-
Extensive experience managing cyber security and risk
-
Extensive experience interpreting and applying the law governing information management
Desirable:
-
Broad IM&T knowledge and understanding of computer and confidentiality-related legislation
-
Understanding of enterprise-scale IT network management principles
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and requires submission to the Disclosure and Barring Service (formerly CRB) to check for any previous criminal convictions.
Certificate of Sponsorship
Applications from job seekers requiring Skilled Worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For more information, visit the UK Visas and Immigration website.
From 6 April 2017, skilled worker applicants applying for UK entry clearance must present a criminal record certificate from each country they have resided in continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18) are also subject to this requirement. Guidance can be found here.
How to Apply
If you’re interested in this role, visit the official website for more information — click here to apply now.