Head of Cyber Security

Job overview

The Head of Cyber Security will lead the Trust’s cyber security strategy, governance, and operations. This senior leadership role ensures the confidentiality, integrity, and availability of OUH’s digital assets and information systems. The post holder will act as the authoritative voice on cyber security, representing OUH in regional and national forums, and will be responsible for aligning the Trust’s cyber posture with NHS frameworks such as DSPT, CAF, and ISO .

The Head of Cyber Security is responsible for shaping and executing the Trust’s cyber security strategy, ensuring that digital assets and information systems remain secure, resilient, and compliant with NHS frameworks such as DSPT, CAF, and ISO. This role provides strategic leadership by developing and implementing cyber security plans, leading maturity assessments, and offering board-level assurance on risk and compliance. The post holder represents the Trust in key regional and national cyber forums, helping to align local priorities with broader NHS initiatives.

In addition to strategic oversight, the role encompasses governance and risk management, including ownership of the Information Security Management System (ISMS), leading audits, chairing assurance groups, and supporting data protection compliance as Deputy SIRO.

Oxford University Hospitals NHS Foundation Trust is one of the largest NHS teaching trusts in the country. It provides a wide range of general and specialist clinical services and is a base for medical education, training and research. The Trust comprises four hospitals - the John Radcliffe Hospital, Churchill Hospital and Nuffield Orthopaedic Centre in Headington and the Horton General Hospital in Banbury.

For more information on OUH please view

Our values, standards and behaviours define the quality of clinical care we offer and the professional relationships we make with our patients, colleagues and the wider community.