Deputy Director Cyber Security - UK Health Security Agency - SCS1

Location

Birmingham, Leeds, Liverpool or London.
This role is being offered as hybrid working based at any of our Core HQs. We offer great flexible working opportunities at UKHSA and operate using a hybrid working model where business needs allow. This provides us with greater flexibility about how and where we work, to get the best from our workforce. As a hybrid worker, you will be expected to spend a minimum of 60% of your contractual working hours (approximately 3 days a week pro rata, (averaged over a month) working at one of UKHSA's core HQs (Birmingham, Leeds, Liverpool, and London). Our core HQ offices are modern and newly refurbished with excellent city centre transport links and benefit from co-location with other government departments such as the Department for Health and Social Care (DHSC).

Future location

UKHSA is investing in a new state-of-the-art National Biosecurity Centre in Harlow, Essex, which will eventually bring together teams currently based at Canary Wharf, Colindale and Porton Down. For more details, please see: Huge biosecurity centre investment to boost pandemic protection - GOV.UK. The new facilities will start becoming operational in the mid-2030s, with full completion by 2038. Staff will move in phases as facilities become available. If you're appointed to a role currently based at Canary Wharf, Colindale or Porton Down, please note that we'll continue investing in these sites for the next decade. As we get closer to the transition, we'll provide full information about relocation support available to staff.

About the job

Job summary

UKHSA has an exciting opportunity for a Deputy Director of Cyber Security to strengthen its capability in protecting digital assets. Working closely with internal teams and key stakeholders (Government Security Group, NCSC, NPSA), the role will help build a resilient infrastructure that supports UKHSA’s ambition to become a global leader in health security and a critical component of national security.

You will be part of the Chief Data Officer (CDO) Group senior leadership team, which brings together Trusted Data & Technology, Data & Digital, and Analysis & Intelligence Assessment. The Group harnesses data, safeguards systems, and supports integrated analysis to assess health risks, inform policy, and protect public health.

The Trusted Data & Technology Directorate (TDT) delivers impact by transforming the UK’s approach to public health data, analytics, and surveillance. It comprises four divisions: Information Management & Privacy, Data Strategy & Performance, Technology, and Cyber Security.

As Deputy Director Cyber Security, reporting to the Director of TDT, you will lead and develop an effective, resilient cyber function that protects UKHSA from threats. The role involves leading a mixed team of civil servants and managed service providers, embedding a strong security culture, maintaining robust incident response, and ensuring long-term resilience of networks, systems, and data. You will also manage the division’s budget and contracts, operating in a fast-paced environment with competing priorities.

You will contribute to wider senior leadership, supporting an inclusive culture and playing a strong corporate role across UKHSA.

This role is open to all external applicants (anyone) from outside the Civil Service (including internal applicants).

Job description

Key responsibilities

• Lead and motivate cyber security teams (civil servants and contractors).
• Horizon-scan and plan for emerging cyber threats in collaboration with NHS England, NCSC, NPSA and other government bodies.
• Promote a strong security culture across UKHSA.
• Develop cyber capability within the team and wider organisation.
• Ensure robust, tested resilience and incident response plans.
• Embed “secure by design” principles across systems and programmes.
• Develop metrics to inform SIRO governance and risk management.
• Oversee budget, contracts, and financial accountability in line with public sector standards.

Reporting Responsibilities

Reporting to the Director of Trusted Data & Technology, you will:

• Develop and mature UKHSA’s cyber security function.
• Lead a team of around 42 staff and managed services partners.
• Support compliance programmes (e.g. DSPT-CAF).
• Act as senior cyber advisor to the UKHSA SIRO, contributing to governance and risk escalation.
• Provide balanced advice across operational, information, IT, and supply chain security.
• Manage responses to cyber threats impacting services and data.
• Oversee delegated budgets and commercial processes.

You will need to stay current with a rapidly evolving technical landscape and maintain strong relationships across government and industry

Person specification

It is important through your CV and Statement of Suitability that you provide evidence and examples of proven experience of these Essential selection criteria.

• Cyber Security Expertise
  Proven cyber security professional with the credibility to engage technical audiences. Strong practical cyber knowledge, supported by relevant qualifications where applicable.
• Leadership
  Exceptional people leader with a proven track record of building, leading, and developing diverse security teams, supporting both organisational goals and individual career growth.
• Influencing & Stakeholder Management
  Highly effective communicator with strong stakeholder management skills, able to influence at senior levels and build trusted relationships across internal and external partners.
• Decision-Making & Problem Solving
  Able to navigate complex challenges in a fast-changing environment, drawing on expertise from others to manage risk and make sound decisions at pace.
• Risk, Compliance & Governance
  Strong understanding of cyber security legal and regulatory requirements, including GDPR and NIS. Able to balance threats and mitigations to provide clear, risk-based recommendations.
• Commercial & Financial Acumen
  Strong commercial and financial awareness, with a proven ability to drive efficiency and deliver value for money.