HSE still seeking to fill crucial cyber security post

The HSE’s search for a Chief Information Security Officer (CISO) is continuing, this newspaper has been told.

The CISO will be responsible for driving forward a cyber security transformation programme with strategic and tactical cybersecurity improvements, managing third parties that provide cybersecurity services and leading the cybersecurity response to cyber incidents.

The role has been re-advertised by the Public Appointments Service, a HSE spokesperson told the Medical Independent. “The competition is ongoing and interviews are currently taking place.”

In March 2022, the HSE informed this newspaper it intended to fill the positions of CISO and Chief Technology and Transformation Officer (CTTO) by the end of that year.

The creation of the CISO and CTTO roles was recommended in the post-incident review following the cyberattack on the HSE in May 2021.

Mr Damien McCallion has been appointed CTTO and commenced his role in June.

Mr McCallion was until recently the HSE Chief Operations Officer (COO). Asked whether his appointment would impact this position, the spokesperson said the COO role was no longer needed.

“With the establishment of the health regions [which] will carry the operational responsibility, there is no requirement for a COO and hence this role no longer exists,” said the spokesperson. They stated that Mr McCallion has also been appointed as Deputy CEO of the HSE.

As CTTO, Mr McCallion will be responsible for implementing the recently approved Digital for Care – a Digital Health Framework for Ireland 2024 – 2030. 

He will also oversee the organisation’s medium- to long-term transformation programmes beyond the area of technology and will be the HSE Director of the Sláintecare programme.

The nature of the CTTO position was discussed at a meeting of the HSE technology and transformation committee in April.

According to minutes, the committee noted that the CTTO “role has been strengthened from its original design…which gives added weight to the appointment as there is a clear expectation of involvement at high level…and the role will not be just exclusive to technology”.

In February, MI reported that the HSE would undertake a new recruitment campaign for the permanent position of CTTO following the withdrawal of a successful candidate for the position last year.