IT and Security Lead

MLC Partners are working with an established and highly regarded charity operating in the healthcare sector to recruit an experienced IT and Security Lead to support the delivery of its IT, digital and cybersecurity priorities. The organisation works closely with a major healthcare institution and is currently reviewing the long-term structure of its IT function. This is an excellent opportunity for a hands-on IT and cybersecurity professional to take ownership of a broad, high-impact role during an important period of organisational development.

The IT and Security Lead will be the key point of contact for IT, digital and cybersecurity matters across the charity. The role will support the delivery of the organisation’s IT and digital strategy, strengthen cyber resilience, and help ensure that systems, suppliers and support arrangements are fit for purpose. A major early priority will be to renew the organisation’s Cyber Essentials certification, which has lapsed, before progressing work towards Cyber Essentials Plus. The role will also involve reviewing the organisation’s current IT support model.

Key Responsibilities:

• IT, Digital and Cybersecurity Leadership
  • Act as the organisation’s lead point of contact for IT, digital infrastructure and cybersecurity.
  • Support the delivery of the IT and digital strategy, translating priorities into practical delivery plans.
  • Work with senior stakeholders to identify technology requirements that support organisational objectives.
  • Review current IT systems, processes and support arrangements, identifying opportunities for improvement.
  • Provide advice on IT risks, service quality, supplier arrangements and future investment needs.
• Cyber Essentials and Cybersecurity
  • Lead the work required to renew Cyber Essentials certification.
  • Develop and progress a roadmap towards Cyber Essentials Plus.
  • Review existing cybersecurity controls, policies and processes.
  • Identify gaps and drive improvements across devices, access management, patching, software, data handling and supplier arrangements.
  • Promote good cybersecurity practice across the organisation.
  • Monitor and report on cybersecurity risks, incidents and mitigation activity.
  • Support the development and maintenance of IT and information security policies, procedures and documentation.
• IT Support and Operating Model Review
  • Review current IT support arrangements, including services provided by a partner organisation.
  • Assess whether the existing model remains suitable in light of future accommodation and operational requirements.
  • Explore future options for IT support, including continued partner provision, outsourced support or bringing elements in-house.
  • Develop a business case for a revised IT support model if required.
  • Support any future transition to new IT support arrangements, ensuring effective planning, documentation and delivery.
• Systems, Suppliers and Service Delivery
  • Act as the liaison between internal users, partner IT teams and external suppliers.
  • Oversee day-to-day IT and systems issues, ensuring effective escalation and resolution.
  • Manage relationships with relevant technology suppliers and service providers.
  • Support procurement or contract review activity relating to IT, systems, cybersecurity or digital services.
  • Ensure appropriate documentation is maintained for systems, licences, assets, contracts and support arrangements.
• Governance, Risk and Compliance
  • Provide updates to senior leadership on IT delivery, cyber risk, service performance and project progress.
  • Maintain IT risk records and contribute to wider organisational risk management.
  • Ensure IT and cybersecurity activity aligns with charity governance, data protection and information security requirements.
  • Support audit, assurance and compliance activity where required.
  • Help build a culture of secure, effective and user-focused technology use.

Person Specification:

• Essential Experience
  • Experience in an IT management, IT lead, cybersecurity, information security or digital operations role.
  • Strong understanding of Cyber Essentials and/or Cyber Essentials Plus.
  • Experience improving cybersecurity controls in a small to medium-sized organisation.
  • Experience working with outsourced IT providers, shared service arrangements or third-party technology suppliers.
  • Ability to translate technical IT and cybersecurity issues for non-technical stakeholders.
  • Experience reviewing IT service models, support arrangements or technology operating models.
  • Strong understanding of IT infrastructure, end-user computing, access management, patching, device management and systems support.
  • Experience producing reports, recommendations or business cases for senior stakeholders.
• Desirable Experience
  • Experience working in a charity, healthcare, public sector or regulated environment.
  • Experience supporting an organisation through Cyber Essentials or Cyber Essentials Plus accreditation.
  • Experience developing IT policies, cyber policies, asset registers or risk registers.
  • Experience managing IT transitions, office moves or changes to IT service provision.
  • Knowledge of data protection, information governance or GDPR requirements.