Information Governance Manager

• As the operational lead for information governance, you will support the Data Protection Officer to ensure HJE remains compliant with the UK GDPR, the Data Protection Act 2018, ICO guidance and sector best practice, including the NHS Data Security and Protection Toolkit.
• You will investigate information governance incidents and complaints, working closely with the DPO, SIRO and Caldicott Guardian to assess risk and potential breaches, meet the 72-hour reporting window where required, and turn lessons learned into lasting good practice.
• Day to day, you will develop and deliver information governance training and guidance, maintain policies, privacy notices and the IG risk register, and carry out audits and compliance spot checks across the Hospital and Hospice.
• You will work with Information Asset Owners to map assets and data flows and maintain the centralised Register of Processing Activities, support colleagues with Data Protection Impact Assessments, and under the supervision of the General Counsel review Data Sharing Agreements and carry out supplier due diligence.
• You will ensure data subject requests are answered within statutory timeframes (supporting the Medical Records team on medical records requests), attend and report to the Information Governance Committee on key compliance KPIs, complete and submit the annual NHS Data Security and Protection Toolkit, and support the SIRO, DPO and Caldicott Guardian in discharging their duties.

Essential

• You will have substantial experience in information governance or data protection, ideally gained in a hospital or comparable regulated setting, and be confident applying the rules to real, practical situations.
• You will hold or be actively working towards a recognised data protection or information governance qualification (for example the BCS Practitioner Certificate in Data Protection or IAPP CIPP/E), or be able to demonstrate equivalent professional experience.
• You will have a working knowledge of the UK GDPR, the Data Protection Act 2018 and the common law duty of confidentiality, along with an awareness of ICO guidance; familiarity with the Caldicott Principles and the NHS Data Security and Protection Toolkit would be a real advantage.
• You will have a track record of investigating information governance incidents and personal data breaches, handling data subject requests to statutory deadlines, and developing and delivering training that raises awareness across an organisation.
• Above all, you will bring sound analytical judgement, discretion and the highest standards of integrity, the ability to influence and challenge colleagues at all levels, and the resilience to work autonomously and prioritise competing statutory deadlines.