Job summary
- Main area
- IT
- Grade
- Band 8b
- Contract
- Fixed term: 24 months (to April 2027)
- Hours
- Full time
- Flexible working
- Job ref
- 025-AC098-0525
- Employer
- Digital Health and Care Wales
- Employer type
- NHS
- Site
- Hybrid working
- Town
- Location to be confirmed at interview
- Salary
- £63,150 - £73,379 per annum
- Salary period
- Yearly
- Closing
- 22/05/2025 23:59
Employer heading

Lead Cloud Security Architect
Band 8b
Digital Health and Care Wales is an ambitious organisation created by Welsh Government to lead on the digital transformation of health and care. It builds on the digital architecture and national services put in place by the NHS Wales Informatics Service over the past decade.
The organisation will lead on large-scale developments that make a significant difference to the people of Wales as well as to health and care professionals, such as expansion of the digital patient record and the creation of a National Data Resource. It will improve the way data is collected, shared and used. Please check your email account regularly. Successful applicants will receive all recruitment related correspondence via the email account registered on the application form.
All applicants are invited to apply in Welsh, any application submitted in Welsh will not be treated less favourably than an application made in English.
Please be advised that there is a temporary top up for Bands 2 and 3 to reflect the incorporation of the top up to the living wage of £12.60 per hour - £24,638 per annum.
This temporary top up will be in place until the annual pay uplift for 2025/26 is confirmed
Job overview
Are you looking for a technical leadership role in a large organisation delivering critical healthcare IT services to over 100,000 people? If so, then we are looking for you!
Join a multi award-winning team and enjoy flexible working hours, professional development opportunities, and a collaborative work environment
We are undertaking a Cloud Transition Programme (CTP) to move 80 digital services, currently hosted on 1,600 on-premises servers, to Azure and GCP, over a period of around 2 years.
The focus of this role is to ensure that all solutions are designed and implemented in the most secure way possible and retains all necessary compliance accreditation. This role will work alongside two others (Cloud Migration Architect and a Solution Architect)
A key part of the role will be lead a shift from a traditional on-premises infrastructure operating model to a new cloud-based operating model focussed on IaC, automation, self-service and adoption of open-source technologies.
This role requires a proactive and passionate individual, able to work autonomously in a complex environment, and highly focused on achieving results.
If you are an exceptional candidate ready to make a significant impact, apply now and be part of our transformative journey!
Main duties of the job
As Lead Cloud Security Architect you will:
• Own the design(s) which ensure that the solutions meet the required Cyber security requirements for the Cloud Transition Programme (CTP) and ongoing service delivery.
• Lead on the development of necessary standards for future deployments.
• Lead the technical engagement within the CTP and between the CTP, appointed technical suppliers and DHCW teams to enable that work progresses at-pace and resolve any issues as required.
• Develop work packages for suppliers to design and configure cloud infrastructure as required.
• Ensuring services and products are aligned to industry best practice and regulatory and contractual requirements.
• Enable and promote the use of automation and self-service.
• Provide technical leadership to operations, infrastructure, and Fin Ops teams to optimise the performance and costs of IT infrastructure.
• Work on high-profile systems and solutions delivered at the National scale, in line with the organisation’s commitment to agile delivery practices and a product-based approach.
• Be the escalation point for any technical programme issues and champion operational management across the community, working closely with other leaders.
Working for our organisation
Digital Health and Care Wales (DHCW) is an expert national body and part of NHS Wales. We work in partnership with NHS Wales colleagues and other key stakeholders to provide national digital and data services which support the delivery of health and social care in Wales. Modern health and care services depend on good digital tools, data and information. DHCW runs or works with more than 100 services and delivers major national digital transformation programmes to support this. In addition, DHCW provides expert advice in relation to cyber security and information governance. We give frontline staff the digital tools which help them provide safer and more efficient care. We are also giving patients and the public digital tools to better manage their own health and wellbeing, empowering people to live healthier lives. We put people at the heart of what we do, working to the highest standards to deliver quality and make digital a force for good in health and care.
Working for DHCW offers lots of employee benefits, including flexible working, a competitive salary, 28 days of annual leave plus Bank Holidays and opportunities for career development. We are committed to recognising and celebrating our staff as the most valuable part of our organisation.
Detailed job description and main responsibilities
You will be able to find a full Job description and Person Specification attached within the supporting documents or please click “Apply now” to view in Trac
You will:
• Oversee the design and development of complex architectural solutions, ensuring that Cyber best practice is engrained in all work streams with and adherence applicable standards.
• Develop and maintain Cyber security architectural blueprints and roadmaps.
• Develop and communicate cloud architecture principles and standards across the organisation.
• Support multiple teams, finding and using best practice and emerging technologies, to deliver cloud-based health solutions.
• Work with security, compliance and operational teams to meet regulatory requirements.
• Drive innovation and explore emerging technologies, to seek opportunities for digital transformation
• Champion best-practice architectural principles and patterns, ensuring our solutions are secure, scalable, resilient, maintainable, and interoperable. Lead governance, solving complex and high-risk issues or delivering architecture design.
• Define and lead the long-term architectural vision, strategy, and objectives.
• Ensure solutions are secure, scalable, resilient, maintainable, and interoperable.
• Participate in an on-call 24x7 management rota
The ability to speak Welsh is desirable for this post; English and/or Welsh speakers are equally welcome to apply
Person specification
Qualifications and Knowledge
Essential criteria
- A Master’s degree in an associated professional field (or equivalent qualification / experience).
- Industry recognised qualification in cloud security architecture
Desirable criteria
- Relevant Professional Registration: E.g. Chartered IT Professional (CITP)
- FEDIP Practitioner, or equivalent recognised Intermediate Professional qualification
Experience
Essential criteria
- Experience of successfully reviewing security configurations in an operational IT service delivery role, within a large, complex programme, delivering security solutions, governance, risk and compliance.
- Experience of defining and designing Cyber security requirements for IT systems in line with the strategic objectives to match the needs of the organisation
Desirable criteria
- Ability to review and evaluate emerging security technologies.
- Strong understanding of human factors in security and how they impact digital adoption
- Ability to align security initiatives with business goals to drive measurable improvements
Skills and Attributes
Essential criteria
- Adaptability and flexibility skills to quickly understand and apply new technologies, take account of new information or changed circumstances and/or business requirements, and to modify response to a problem or situation accordingly.
- Analytical thinking skills to acquire a proper understanding of a problem or situation by breaking it down systematically into its component parts and identifying the relationships between these parts, selecting the appropriate method/tool to resolve the problem and reflect critically on the result, so that what is learnt is identified and assimilated.
Desirable criteria
- Welsh language skills are desirable at levels 1 or above in understanding, speaking, reading and writing in Welsh.
- Commitment to supporting the organisation’s mission to encourage and embrace diversity and inclusion across the NHS.
Applicant requirements
Welsh language skills are desirable
Documents to download
Further details / informal visits contact
- Name
- Andy Shanahan
- Job title
- Cyber Assurance Lead
- Email address
- [email protected]
List jobs with Digital Health and Care Wales in Administrative Services or all sectors