Cyber and Digital Health Senior Manager

The Cyber and Digital Health Senior Manager plays a pivotal role in leading and managing complex cyber security and digital trust engagements across the UK healthcare market, with a particular focus on the NHS and wider health and social care ecosystem. The successful candidate will bring relevant experience in delivering broad cyber advisory services, including DSPT-CAF readiness and remediation, cyber strategy, governance, risk and assurance, and programmes that enable frontline productivity through secure, resilient and effective use of technology.

Description of the role

• Manage large and complex cyber strategy engagements, leading multiple workstreams and managing the delivery of other managers within the team.
• Lead and manage a team of cybersecurity professionals, providing strategic direction and ensuring high‑quality client service delivery.
• Contribute to expanding KPMG’s impact across the UK healthcare market, including the NHS, integrated care systems, health and care providers, and enabling national bodies.
• Develop and maintain relationships with key stakeholders across the healthcare sector, including NHS leaders, digital, cyber, clinical, operational, information governance and transformation teams.
• Identify and pursue new business opportunities, develop proposals, and negotiate contracts.
• Support the development of our people as a performance manager, coaching and developing the team around you, and promoting and supporting a culture of learning and development across the team.

The Cyber and Digital Health Senior Manager will also have opportunities to support our Leadership team as we continuously evolve our healthcare cyber strategy, help create, build and evolve propositions aligned to NHS priorities, and develop thought leadership that supports our market messaging on cyber resilience, DSPT-CAF, secure digital transformation and frontline productivity. This is a senior delivery role and will be responsible for managing multiple teams or workstreams across multiple clients, in some cases managing other managers within the team.

Stakeholder Interaction

• High level of stakeholder interaction and challenge, including:
• Internal stakeholders: business development teams, sales teams, delivery teams, technical development teams, Quality and Risk Management.
• External stakeholders: client stakeholders and decision makers across the NHS, wider UK healthcare market, health and care providers, commissioners, regulators and national bodies, including those responsible for cyber security, digital transformation, clinical operations, information governance and frontline productivity.

Experience Specific to this role, applicants should demonstrate proficiency across the following skills and experience:

• Defining cyber security strategies, considering an organisation’s business and technology objectives and aligning future capabilities to the needs of the organisations.
• Designing and implementing Cyber Security Target Operating Models (TOMs), considering all aspects of a modern TOM including people, processes, technologies, service delivery models, governance structures, and metrics and reporting.
• Creating business cases for cyber security investments and securing stakeholder commitment to cyber improvement programs.
• Managing the delivery of strategic cyber security programmes, including project management activities, stakeholder reporting and monitoring of delivery outcomes.
• Understanding and delivering experience with leading security and healthcare assurance frameworks, including the NHS Data Security and Protection Toolkit and Cyber Assessment Framework (DSPT-CAF), National Cyber Security Centre Cyber Assessment Framework (NCSC CAF), ISO27001:2013/2022, NIST Cyber Security Framework and other relevant regulatory or assurance requirements.
• Advising healthcare organisations on DSPT-CAF readiness, gap assessment, remediation planning, evidence development, assurance, reporting and sustainable improvement across cyber, information governance and operational resilience domains.
• Supporting NHS clients to improve frontline productivity by aligning cyber security, digital infrastructure, clinical technology, governance and operating model improvements to measurable service delivery outcomes.
• Assessing cyber security capabilities against an organisation’s threat landscape and cyber risk profile.
• A working understanding of security architecture principles.
• A working understanding of cyber security governance models.
• A working understanding of regulatory requirements (NIS, GDPR etc) of organisations in individual sectors.

More generally, we expect that you will have:

• Proven experience leading work at sustained levels of high quality, including inspiring drive and resilience in others.
• Excellent written and verbal communication skills.
• Excellent presentation and influencing skills.
• An ability to develop excellent relationships both internally and with clients at a senior level.

Benefits and Support

From role sharing and flexible start and finish times to home working, we will try and support the flexible work patterns that best suit you. We’re committed to creating an inclusive environment where all colleagues thrive and reach their full potential, whatever their identity or background. We’re a member of the Business Disability Forum so please get in touch if you’d like to discuss any adjustments that you might need in the application process - and if you are successful beyond this.