Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Director - Healthcare - Data Security and Data Protection role.

Rezi rewrites your resume against KPMG UK's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Director - Healthcare - Data Security and Data Protection posting at KPMG UK — free, in seconds.

About the Role

This Director role leads the go-to-market strategy for data security and data protection services, with a primary focus on the healthcare sector and a broader remit across the public sector. The role involves helping healthcare clients protect sensitive data, maintain trust, meet obligations, and enable secure data use across various digital services. Specialists provide independent advice and technical capabilities to help clients govern, protect, and use data responsibly, enhancing resilience, compliance, and outcomes.

Responsibilities

Collaborate with healthcare cyber leadership, data and privacy specialists, and partners to deliver the business plan, prioritizing healthcare while supporting broader public sector opportunities.
Grow the business by addressing client needs in data discovery and classification, privacy transformation, information governance, secure cloud and data platforms, AI governance, identity and access, data loss prevention, records management, and third-party data risk.
Build relationships across health advisory, digital transformation, cloud, data, AI, privacy, technology risk, and operational improvement to integrate data security and protection into healthcare transformation programs.
Develop and maintain effective working relationships with strategic alliance partners, such as Microsoft and ServiceNow, to create differentiated healthcare propositions and deliver solutions for data discovery, classification, protection, monitoring, privacy operations, and secure data use.
Lead and develop a multidisciplinary team with strong healthcare, privacy, information governance, data security, and technical delivery capabilities, and support recruitment.
Originate and lead sales opportunities for data security and data protection, primarily in healthcare organizations and, where relevant, across central government, local government, public bodies, and other public services.
Build senior internal and external relationships and maintain a high-quality pipeline of data security, privacy, and information governance opportunities, led by healthcare demand and extended selectively across the wider public sector.
Lead data security and data protection engagements, ensuring quality, commercial discipline, and alignment with healthcare operations, clinical safety, regulatory obligations, and patient trust.
Define and recruit the skills needed to strengthen the healthcare team, including privacy, information governance, data architecture, data security engineering, cloud security, AI governance, and regulatory assurance.
Take accountability for data security and data protection engagements and lead multiple programs with support from Senior Managers and Managers.
Expand healthcare services through propositions addressing privacy transformation, information governance, secure data sharing, data lifecycle controls, cloud and AI data protection, and regulatory assurance.
Provide leadership across coverage groups to deliver a clear, unified strategy for healthcare data security and data protection, while adapting relevant propositions and delivery approaches for the broader public sector.
Lead healthcare sales origination and business development for data security, privacy, and information governance, and help extend proven healthcare propositions into the broader public sector as part of the Technology and Cyber Security leadership team.
Identify growth opportunities arising from healthcare data risk, digitization, interoperability, cloud adoption, AI, research, regulatory change, and the need for trusted data use.
Build and manage senior relationships across healthcare, including CIOs, CCIOs, CNIOs, CISOs, SIROs, Data Protection Officers, Caldicott Guardians, Chief Data Officers, clinical leaders, and boards, while developing relevant relationships with digital, data, security, and information-governance leaders across the broader public sector.
Identify and progress business development opportunities, including RFP responses, bids, proposals, and client presentations focused on data security and data protection.
Develop internal networks across cyber, digital health, privacy, information governance, data, cloud, AI, risk, and public sector teams.
Coach team members to build commercially confident, technically credible, and sector-aware capability in data security and data protection.
Contribute to training, knowledge management, thought leadership, propositions, and reusable healthcare assets for data security, privacy, and information governance.
Travel in the UK to regional offices and client sites, including healthcare clients where required; and travel in the UK or internationally to support client delivery where required.
Act in line with KPMG’s values at all times.

Requirements

Bachelor’s degree qualification.
Substantial experience in healthcare, ideally within the NHS, public sector health, private healthcare, health technology, life sciences, or a closely related data-intensive and regulated environment.
Experience applying healthcare expertise to central government, local government, public bodies, or other public services would be advantageous.
Senior-level expertise in data security and data protection, with the credibility to advise healthcare leaders on privacy, information governance, data risk, secure data use, data sharing, and technical protection controls.
Strong knowledge of healthcare data flows, operating models, and decision-making across NHS organizations, national bodies, providers, commissioners, regulators, and private healthcare organizations.
Established healthcare relationships and market knowledge, with the ability to engage Data Protection Officers, SIROs, Caldicott Guardians, CISOs, Chief Data Officers, clinical leaders, and boards.
Commercial awareness and industry relationships that support significant annual revenue targets through origination, account development, and high-quality delivery of data security and data protection services.
Deep technical knowledge of data security and privacy, including data discovery and classification, data lifecycle controls, encryption, key management, identity and access management, data loss prevention, monitoring, secure data sharing, privacy engineering, and cloud data protection.
Must be technically sound and comfortable shaping, configuring, and overseeing the deployment of relevant Microsoft and ServiceNow technologies in support of data-security outcomes.
Strong knowledge of UK GDPR, the Data Protection Act 2018, common law confidentiality, the Caldicott Principles, NHS information governance expectations, records management, clinical safety, and relevant security and privacy standards.
Proven experience leading and delivering privacy, information governance, data security, data transformation, and managed service engagements for large and complex organizations.
Proven ability to connect data security and data protection risk to healthcare outcomes, patient confidentiality, clinical safety, operational continuity, public trust, and board accountability.
Excellent communication skills, including the ability to explain legal, regulatory, governance, and technical data risks to executives, clinicians, operational leaders, and boards.
Extensive sales, negotiation, and project leadership experience, with a track record of converting healthcare relationships and data-risk insight into secured work.
Sound understanding of risk management in a professional services environment.
A collaborative leadership style, able to bring together privacy, information governance, cyber, data, cloud, AI, legal, clinical safety, and operational transformation expertise around client problems.
Must understand how sensitive health and care data is created, shared, accessed, retained, and disposed of; how legal duties, confidentiality, clinical practice, and technology interact; and why data protection must enable safe, trusted, and effective care.
Must be able to open senior healthcare conversations, assess data risk across complex ecosystems, and shape practical propositions covering governance, privacy, secure data architecture, protective controls, responsible AI, and assurance.
Advice should be credible to executives, clinicians, Data Protection Officers, Caldicott Guardians, digital and data leaders, security teams, and boards.

Skills

Data Security
Data Protection
Privacy
Information Governance
Cyber Security
Data Discovery
Data Classification
Privacy Transformation
Secure Cloud and Data Platforms
AI Governance
Identity and Access Management
Data Loss Prevention
Records Management
Third-Party Data Risk Management
Cloud Security
Data Architecture
Data Security Engineering
Regulatory Assurance
UK GDPR
Data Protection Act 2018
Caldicott Principles
NHS Information Governance
Clinical Safety
Microsoft Technologies
ServiceNow Technologies
Sales
Negotiation
Project Leadership
Risk Management
Communication Skills
Collaboration

Location

Work Type

Full-time
Onsite

Experience Level

Director
Senior-level

Education Level

Bachelor's degree
MBA or Master's degree or relevant professional qualification desirable

About the Company

The role is within the UK Cyber Security practice of KPMG's Advisory service line.
KPMG's specialists provide independent, practical advice and technical capabilities to help clients govern, protect and use data responsibly throughout its lifecycle, while strengthening resilience, regulatory compliance and service outcomes.
KPMG provides cyber security services to clients across three coverage groups: Financial Services, Sectors, and Infrastructure, Government and Health.