Herefordshire and Worcestershire Health and Care NHS Trust

Cyber Security & Information Governance Manager

The closing date is 20 November 2025

Job summary

We're experiencing an exciting period in Digital, Data, and Technology (DD&T) Services at Herefordshire and Worcestershire Health and Care Trust, and we're looking for a Cyber Security and Information Governance Manager to join our team.

This is a critical senior role within the DD&T leadership, working closely with the Senior Leadership Team to embed a future-proof Cyber and IG Strategy.

The primary focus is the continuous improvement of our Cyber Security and Information Governance functions, ensuring the Trust is Cyber Safe and Data Compliant while successfully achieving its strategic digital priorities.

Join our incredible Digital team, where we pride ourselves on providing outstanding digital care to patients across the region. We offer the resources to develop a long-term career, along with flexibility and continual professional development.

If you're ready to drive essential strategic change in a supportive environment, please get in touch for an informal discussion.

This is a full time post.

Please note the Trust is unable to provide sponsorship to work for this role, to apply you must have current right to work in the UK status.

Main duties of the job

We seek a Cyber Security & Information Governance Manager with proven experience in these specialist domains within the NHS or a similarly complex setting.

This role demands a strategic representative who will champion the digital security and governance agenda at all levels, regularly attending key forums, including Sub-Board and Board meetings, and acting as the Trust's ambassador at local, regional, and national events.

The successful candidate must have a track record of successfully implementing large-scale organisational change in Cyber/IG, specifically leading and assuring compliance with national frameworks like DSPT/CAF. You must possess considerable expertise in developing and implementing robust Cyber/IG strategies, policies, and procedures. Demonstrable experience in managing and motivating teams is highly desirable.

About us

At Herefordshire and Worcestershire Health and Care NHS Trust, we are working together to deliver outstanding care. We run community hospitals and community health services across Worcestershire and provide mental health and learning disability services across both Herefordshire and Worcestershire.

Our people (all 4500+ of them) provide services for people of all ages, experiencing both physical and/or mental health conditions from over 100 sites.

We will support you to thrive; offer flexible working options for a great work-life balance, help you fulfil your ambitions, and empower you to make positive changes within your team or service. We value diversity and encourage applications from people of all backgrounds, cultures, and ethnicities.

What we offer;

27 days leave plus bank holidays, increasing up to 33 days with long service
Generous NHS pension and enhanced pay when you work unsocial hours
Flexible and agile working opportunities
Great maternity, paternity, and adoption support
Wide range of supportive staff networks
Health and wellbeing opportunities

If you would like to know more, please visit our website.

We encourage you to read the attached applicant guidance notes.

Sharing your data - As a data controller we may sometimes need to process your data to pursue our legitimate business interests, for example to request a survey from you (optional), to support the Trusts understanding of where you gained interest in working for the Trust.

Date posted

06 November 2025

Pay scheme

Agenda for change

Band

Band 8a

Salary

£55,690 to £62,682 a year

Contract

Permanent

Working pattern

Full-time

Reference number

C9798-1809

Job locations

1 Kings Court

Charles Hastings Way

Worcester

WR5 1JR

Job description

Job responsibilities

For full details of the duties and criteria for the role please refer to the job description and person specification attached.

Job description

Job responsibilities

For full details of the duties and criteria for the role please refer to the job description and person specification attached.

Person Specification

Experience

Essential

Substantial experience in IT Security and Information Governance.
Extensive (minimum 5 years) experience in the NHS working at senior management level, on complex issues and the development of strategic direction.
Significant track record of production and development of policies for large organisations.
Experience of interpreting NHS Policies, legislation and national guidance and initiating the development and implementation of long-term strategies, policies, procedures and guidelines.
Experience in conducting Data Protection Impact Assessments.
Experience of developing and implementing Information Governance and Cybersecurity training and awareness programmes for all staff.
Experience of working effectively across a range of operational/corporate departments providing advice/guidance on IT Security and Information Governance.

Additional Criteria

Essential

You understand that we will not provide sponsorship to work for this role.

Qualifications

Essential

Educated to Degree level or equivalent, or significant specialist training/qualifications or significant experience in relevant technical areas.
Evidence of continued professional development in relevant fields.
I understand that I will be asked to provide original certificates to verify my qualifications at point of offer.

Person Specification

Experience

Essential

Substantial experience in IT Security and Information Governance.
Extensive (minimum 5 years) experience in the NHS working at senior management level, on complex issues and the development of strategic direction.
Significant track record of production and development of policies for large organisations.
Experience of interpreting NHS Policies, legislation and national guidance and initiating the development and implementation of long-term strategies, policies, procedures and guidelines.
Experience in conducting Data Protection Impact Assessments.
Experience of developing and implementing Information Governance and Cybersecurity training and awareness programmes for all staff.
Experience of working effectively across a range of operational/corporate departments providing advice/guidance on IT Security and Information Governance.

Additional Criteria

Essential

You understand that we will not provide sponsorship to work for this role.

Qualifications

Essential

Educated to Degree level or equivalent, or significant specialist training/qualifications or significant experience in relevant technical areas.
Evidence of continued professional development in relevant fields.
I understand that I will be asked to provide original certificates to verify my qualifications at point of offer.

Employer details

Employer name

Herefordshire and Worcestershire Health and Care NHS Trust

Address

1 Kings Court

Charles Hastings Way

Worcester

WR5 1JR

Employer's website

https://www.hacw.nhs.uk/careers (Opens in a new tab)

Employer details

Employer name

Herefordshire and Worcestershire Health and Care NHS Trust

Address

1 Kings Court

Charles Hastings Way

Worcester

WR5 1JR

Employer's website

https://www.hacw.nhs.uk/careers (Opens in a new tab)