Director – Healthcare – Data Security and Data Protection

Overview

As Director, you will lead healthcare-focused data security and protection initiatives within KPMG’s UK Cyber Security practice. You will shape data protection strategies for NHS and public sector clients, integrating privacy, information governance, and secure data use across care, cloud, AI, and research. You’ll drive cross-functional collaboration, grow healthcare propositions, and build senior relationships to protect patient trust and meet regulatory obligations. This role blends strategy, delivery leadership, and business development in a mission-driven environment.

Responsibilities

• Lead engagements across privacy, information governance, data security and data sharing for healthcare clients
• Grow and shape data security and data protection offerings (privacy transformation, secure cloud, AI governance, data lifecycle controls)
• Build and maintain relationships with health advisory, digital transformation, cloud, data, AI, privacy, and risk teams to embed security in healthcare programmes
• Develop partnerships with Microsoft and ServiceNow to deliver differentiated healthcare propositions
• Lead multidisciplinary teams and recruit specialist resources for healthcare data security delivery
• Originate and lead sales opportunities across healthcare and broader public sector, maintaining a strong pipeline
• Ensure high-quality delivery with commercial discipline aligned to clinical safety and patient trust
• Define required skills for the healthcare team (privacy, information governance, data architecture, cloud security, regulatory assurance)
• Travel within the UK and internationally to support client delivery and regional offices

Key requirements

• Senior-level expertise in data security and data protection with healthcare credibility
• Strong knowledge of NHS data flows, governance, and information governance expectations
• Established healthcare relationships with CIOs, CDOs, CISO, DPOs and clinical leaders
• Commercial acumen and ability to convert relationships into secured engagements
• Deep technical knowledge of data discovery, encryption, IAM, DLP, monitoring and cloud protection
• Proven track record delivering privacy, information governance and data security engagements for large organisations
• Excellent communication skills to explain regulatory and technical risks to executives and clinicians
• Extensive sales, negotiation, and project leadership experience
• Collaborative leadership style bringing together privacy, cyber, data, cloud and clinical stakeholders
• Understanding of risk management in a professional services context

• Collaborative leadership
• Strategic business development
• Excellent stakeholder management
• Data discovery and classification
• Data lifecycle controls
• Encryption and key management

…