Director of Cyber Security (Home-based UK)

At Health Partners, we pride ourselves on being one of the UK's leading providers of occupational health and wellbeing solutions. We partner with organisations across diverse industries, helping them to support the physical and mental health of their employees.

REF: JOB6812

Role Outline

This is a rare opportunity to build and own a modern security function from a position of real influence. As Director of Cyber Security, you'll lead the strategy, technology and team protecting millions of patients, employees and the sensitive clinical data that underpins our digital healthcare platforms.

You'll be hands-on and close to the technology - driving a cutting-edge Microsoft security stack across Sentinel, Defender XDR, Entra ID, Purview and Azure - while also shaping the board-level conversation, translating complex risk into clear, commercial decisions for our CTO, Executive Team and Board. You'll build and mature a high-performing SOC, embed Secure by Design and DevSecOps thinking across engineering, and lead the charge on red and purple team exercises that keep us ahead of emerging threats.

Beyond day-to-day operations, you'll play a pivotal role in acquisitions, client assurance and cyber due diligence, helping shape the security posture of a fast-growing business at a genuinely exciting stage of its journey.

What You Will Be Doing:

● Setting the cyber security vision, technical policy and risk framework, and owning a multi-year security strategy and maturity roadmap
● Leading and growing the SOC team and wider security operations and engineering function
● Staying technically hands-on, personally driving key initiatives while mentoring and developing the team
● Managing the information security budget, prioritising spend against real organisational risk
● Championing organisation-wide security awareness and training
● Overseeing incident response, threat detection, vulnerability management, identity & access management, security engineering and cloud security
● Leading red and purple team exercises to continuously test and improve technical resilience
● Owning tooling strategy across the Microsoft security stack - Sentinel, Defender XDR, Entra ID, Purview and Azure security - and the vendor relationships behind it
● Embedding Secure by Design and DevSecOps practices to protect digital healthcare platforms and sensitive clinical data
● Defining KPIs and KRIs that demonstrate real, measurable risk reduction
● Delivering commercially framed, board-ready reporting on risk, incidents and SOC performance to the CTO, Executive Team and Board
● Supporting ISO 27001, audit and client assurance activity with expert technical evidence and input
● Driving IT governance and compliance across Change Approval, Incident Management and SDLC processes
● Maintaining certifications such as Cyber Essentials Plus, and aligning with standards including the HMG Security Policy Framework and NCSC cloud principles
● Owning IT business continuity planning and testing
● Supporting cyber due diligence and integration for acquisitions, and leading cyber security aspects of client audits and contract negotiations

What We Are Looking For:
● Previous experience working in senior cyber security or IT leadership experience in a regulated environment, with proven success leading defensive security operations at scale
● Direct experience managing or overseeing technical security operations or security engineering teams
● Strong, hands-on technical knowledge of cloud security (particularly Microsoft Azure), endpoint protection, identity & access management and network security
● A track record of building and maturing a security operations function and team
● Experience leading major cyber incidents, with the confidence to handle live breaches and continuity scenarios
● Experience embedding security into cloud platforms and software engineering
● Skill in communicating cyber strategy and risk to boards or executive leadership in commercial, business-relevant terms
● Strong vendor management capability, with the ability to define and lead tooling strategy
● Commercial awareness and balanced, risk-based decision-making

Location:
Homebased - Please note that this vacancy is for remote working from home in the UK only.

Hours:
Full Time, 37.5 hours per week

Salary:

We are offering a competitive salary for this position

Company Benefits:

We value the people who work with us and our rewards package is reviewed regularly to reflect this. Our current benefits package is:

What we offer:

• A competitive salary and benefits package
• Contributory pension scheme up to 6%
• Life assurance
• Starting on 25 days annual leave plus bank holidays, increasing with length of service
• Have a day off for your Birthday (non-contractual benefit)
• Discounted gym membership
• Cycle to work scheme
• Health cashback plan

Desired Skills and Experience

Direct experience managing or overseeing technical security operations or security engineering teams
Strong, hands-on technical knowledge of cloud security (particularly Microsoft Azure), endpoint protection, identity & access management and network security
A track record of building and maturing a security operations function and team
Experience leading major cyber incidents, with the confidence to handle live breaches and continuity scenarios
Experience embedding security into cloud platforms and software engineering
Skill in communicating cyber strategy and risk to boards or executive leadership in commercial, business-relevant terms
Strong vendor management capability, with the ability to define and lead tooling strategy
Commercial awareness and balanced, risk-based decision-making

About Health Partners

Health Partners are committed to transforming the way health and wellbeing services are delivered in the UK. As one of the UK's leading providers of occupational health and wellbeing solutions, we work with organisations across a wide range of industries to support the physical and mental health of their employees. Our mission is simple: to empower people to lead healthier, happier, and more productive lives.

With a strong focus on innovation and excellence, Health Partners combines clinical expertise with a personal, compassionate approach. Our multidisciplinary team of healthcare professionals, including occupational health advisors, physicians, physiotherapists, and counsellors, delivers tailored, evidence-based solutions designed to meet the unique needs of our clients and their workforce.

We pride ourselves on fostering long-term partnerships built on trust, professionalism, and results. Whether it's through workplace health assessments, proactive wellbeing initiatives, or mental health support, Health Partners is dedicated to making a real difference.

At the heart of Health Partners is a culture of collaboration and continuous improvement. We believe in investing in our people and providing opportunities for growth, ensuring that our employees feel valued and inspired to deliver their best. By joining Health Partners, you'll become part of a dynamic team that's passionate about driving positive change in the workplace and beyond.

If you're ready to make a meaningful impact in the field of health and wellbeing, we'd love to hear from you. Together, we can build healthier futures.

Diversity & Inclusion Statement

Health Partners are a proud member of the Disability Confident employer scheme

Health Partners are extremely proud to support the needs of our employees and as such understands everyone has individual work and home life responsibilities. We're happy to discuss flexible working arrangements for this role, should this be a requirement for you.

We aim to become one of the most inspiring companies to work for and to achieve this ambition, we need the best talent to come and work for us. We look for candidates with the right skills and values to join us and selection is based on a fair and equal process. We're proud to be committed to equal opportunities and welcome applications from all backgrounds.

Diversity and Inclusion forms an integral part of everything that we do, bringing together the best talent, helping people to realise their full potential by being yourself at work and delivering an outstanding service to everyone - regardless of difference.