Information Governance Assurance Officer – NHS

Information Governance Assurance Officer – NHSBand 6 - £25 / 30 per hourNorfolk & NorwichDigital Health – Information GovernanceWe are looking for an experienced Information Governance Assurance Officer to join the Digital Health Information Governance team within a major NHS organisation.This is a hands-on Information Governance and Data Protection role supporting the organisation's compliance, assurance and risk management activities across DSPT, UK data protection requirements, CQC assurance and wider NHS Information Governance.You will work closely with the Head of Information Governance & Data Protection Officer and the Information Governance Assurance Manager, engaging with clinical, operational, digital and corporate teams across the organisation.This would particularly suit an established Information Governance Officer, Data Protection Officer, IG Assurance Officer or Information Governance Specialist with previous NHS or healthcare experience who understands how IG operates in practice within a complex organisation.The RoleYou will support the delivery and assurance of the Trust's Information Governance work programme, helping ensure that appropriate controls, evidence and processes are in place to meet regulatory, statutory and NHS requirements.Key responsibilities will include:Supporting delivery and assurance of the Data Security and Protection Toolkit (DSPT), including evidence gathering, gap analysis, action tracking and monitoring progress against assertions.Supporting the implementation and ongoing assurance of the organisation's Information Governance framework.Undertaking and supporting Data Protection Impact Assessments (DPIAs) for new projects, systems, policies and initiatives involving personal information.Developing and supporting the Information Governance audit programme, including audits, spot checks and assurance activity.Monitoring IG compliance, risks and actions and escalating issues appropriately.Supporting the management and investigation of information governance incidents and data breaches, including analysis and reporting.Supporting data subject rights, including Subject Access Requests, data protection complaints and associated statutory requirements.Maintaining and assuring data flow mapping and Information Asset Register activities.Supporting and monitoring appropriate data and information-sharing agreements with third parties and partner organisations.Maintaining IG policies, procedures, guidance, registers and supporting documentation.Collating, analysing and presenting IG assurance, compliance, training and risk information.Producing clear reports for senior stakeholders and governance committees, including the Caldicott and Information Governance Assurance Committee.Identifying trends, themes and emerging risks from qualitative and quantitative IG data.Supporting the development and delivery of Information Governance training and awareness across the organisation.Working with Divisional Governance teams, Digital Health, clinical services, senior management and other stakeholders to embed a practical, risk-based approach to Information Governance.Deputising for the Information Governance Assurance Manager at relevant governance, risk and assurance meetings when required.What We're Looking ForWe are particularly interested in candidates who bring practical experience of Information Governance and Data Protection within an NHS, healthcare or similarly regulated environment.You should have:Good working knowledge of NHS Information Governance and relevant data protection requirements.Experience supporting DSPT compliance and assurance activities.Understanding of UK data protection legislation and its practical application.Experience undertaking or supporting DPIAs and information risk assessments.Experience working with sensitive and confidential information.Understanding of good governance, assurance and risk-based Information Governance.Experience collating and analysing governance, compliance or assurance data.Strong audit, evidence-gathering and documentation skills.Ability to interpret complex information and turn it into clear, meaningful reports.Experience producing reports suitable for senior management, boards or governance committees.Strong stakeholder-management skills and the confidence to work across clinical, operational, digital and corporate teams.Excellent attention to detail and the ability to manage competing priorities with minimal supervision.Strong Microsoft Office skills, particularly Excel, Word and PowerPoint.QualificationsYou should be educated to degree level in a relevant discipline or be able to demonstrate equivalent significant professional experience.A formal qualification in Information Governance/Data Protection, such as an ISEB, GDPR/Data Protection Practitioner qualification or equivalent, is required.Relevant postgraduate qualifications or further professional development would be advantageous.The PersonThis role needs someone who can do more than interpret policy.You will need to be comfortable working with different parts of a large healthcare organisation, identifying potential IG risks, challenging where necessary and helping stakeholders find practical ways of meeting their Information Governance responsibilities.You should be analytical, organised and confident working independently, while also being able to build productive relationships with colleagues at all levels.Previous experience within a healthcare environment is essential.If you have practical NHS Information Governance experience across DSPT, Data Protection, DPIAs, assurance, audit and information risk, we would be interested in hearing from you.