Data Security and Protection Team Leader

Northampton General Hospital NHS Trust; Kettering; On-site; GBP 42,000 - 62,000; Full time

Job summary

Northampton General Hospital NHS Trust is seeking a specialist to drive Data Security and Protection across the organisation. The role focuses on leadership in DSP, information governance risk management, and ensuring compliance with data protection laws and related statutes.

The post involves planning a DSP toolkit programme, conducting audits, and working with the Cyber Security Lead to close assurance gaps, while promoting a culture of confidentiality, integrity and availability of

Responsibilities

• act as the expert source of advice and expertise in DSP for the Group
• support the development for clinical administration functions within the organisation - identifying information governance risks and providing recommendations for change
• raise the profile of Data Security and Protection and promote a culture of staff responsibilities for confidentiality, integrity and availability
• ensure processes are in place for monitoring the secure disposal of IT and hardware assets
• initiate and plan a programme of work that ensures the Group complies with the requirements of the Data Security & Protection Toolkit
• completion of the annual Data Security & Protection Toolkit submission and the collation of supporting evidence which is analysed and updated to ensure compliance
• lead audits verifying DSP toolkit compliance, incident management and data security, developing improved systems for data quality and availability
• collaborate with the Cyber Security Lead to meet toolkit assertions within NHSD deadlines and close assurance gaps with a compliant plan
• ensure compliance with confidentiality laws and GDPR/Data Protection Act 2018 and related legislation
• investigate and resolve information security issues for systems processing personal or trust-sensitive data

Job description

Detailed job description and main responsibilities

• act as the expert source of advice and expertise in DSP for the Group;


• support the development for clinical administration functions within the organisation - identifying information governance risks and issues and providing recommendations for change


• increase the profile of Data Security and Protection within the organisation and actively support a \"culture change\" so that staff are aware of their responsibilities and duties towards confidentiality, integrity and availability of information;


• ensure processes are in place for monitoring the secure disposal of IT and hardware assets;


• initiate and plan a programme of work that ensures the Group complies with the requirements of the Data Security & Protection Toolkit;


• completion of the annual Data Security & Protection Toolkit submission and the collation of supporting evidence which is analysed and updated to ensure compliance;


• lead a range of audits which will check compliance with the DSP toolkit, research and development and incident management activities, developing improved systems and processes for data quality, data security and protection, data integrity and availability.


• work in partnership with the Groups Cyber Security Lead to ensure that all Cyber related toolkit assertions are met within the NHSD deadline and any gaps in assurance are identified with a plan in place for compliance


• implement and maintain compliance with relevant legislation, particularly the common law duty of confidentiality, the Data Protection Act 2018, the General Data Protection Regulation, the Computer Misuse Act 1990, the Human Rights Act 1998;


• investigate and resolve information security issues and processes for systems which are process personal and/or trust sensitive data