Data Security and Protection Team Leader

Kettering General Hospital NHS Foundation Trust; Kettering; On-site; GBP 40,000 - 55,000; Full time

Job summary

A leading healthcare institution is looking for a dedicated DSP Team Leader in Kettering. This pivotal role supports compliance with data protection regulations across the organization. The DSP Team Leader will lead a team, manage data security incidents, conduct assessments, and deliver training to staff, ensuring the highest standards of data security are met. The ideal candidate will possess strong experience in information governance and data protection laws. This role offers an opportunity to make a real impact within a collaborative healthcare environment.

Benefits

Training and development opportunities

Inclusive work culture

Qualifications

• Expertise in Data Security & Protection regulations and best practices.
• Proven experience in managing teams and leading projects.
• Ability to handle sensitive information discreetly.

Responsibilities

• Lead and manage the DSP team to ensure compliance and quality assurance.
• Deliver training to staff on data security protocols.
• Act as a liaison between departments regarding data protection.

Skills

Data Protection Law

Incident Management

Training Delivery

Analytical Skills

Education

Relevant Degree or Certification in Information Governance

Job description

This is a pivotal role supporting both Northampton General Hospital and Kettering General Hospital as part of our Group approach to ensuring we meet our legal, statutory and regulatory obligations relating to the security and protection of personal data. As our DSP Team Leader, you will play a key part in completion of the Group's DSP Toolkits and managing the DSP Team to ensure all areas of the DSP Toolkit framework are delivered.

• Leading the delivery of DSP workstreams and ensuring evidence is maintained for DSP Toolkit standards.
• Managing, triaging, and supporting investigation of DSP incidents via Datix.
• Delivering DSP training (classroom, small groups and virtual).
• Overseeing the completion and quality of Data Protection Impact Assessments (DPIAs).
• Supporting information sharing governance using the Information Sharing Gateway.
• Raising awareness of data security issues across the Group and promoting best practice.
• Acting as a key point of contact for colleagues seeking specialist DSP support.

Kettering General Hospital NHS Foundation Trust is on an exciting journey with all of our divisions committed to doing things better, with more efficiency as we update, modernise, and advance. We have also entered a Group Model with neighbouring Northampton General Hospital NHS Trust and become University Hospitals of Northamptonshire (UHN). As part of this collaborative approach, there may be a requirement for you to work across both the Kettering and Northampton hospital sites, depending on the needs of the service.

Our Excellence Values

• Compassion
• Accountability
• Respect
• Integrity
• Courage

We want to recruit the best people to deliver our services across UHN and help to unleash everyone's full potential. UHN encourages applications from people who identify from all protected groups. We understand that we need to work with colleagues from diverse backgrounds and make sure the environment they work in is inclusive and collaborative.

We recognise the valuable contribution that the Armed Forces community make to our organisation. We have signed the Armed Forces Covenant and achieved Silver Award under the Armed Forces Employer Recognition Scheme.

We have active Networks that promote and support colleagues from all backgrounds. This ensures everyone feels supported and has a sense of belonging working for UHN.

Key Responsibilities

• Act as the expert source of advice and expertise in DSP for the Group.
• Support the development for clinical administration functions within the organisation – identifying information governance risks and issues and providing recommendations for change.
• Increase the profile of Data Security and Protection within the organisation and actively support a "culture change" so that staff are aware of their responsibilities and duties towards confidentiality, integrity and availability of information.
• Ensure processes are in place for monitoring the secure disposal of IT and hardware assets.
• Initiate and plan a programme of work that ensures the Group complies with the requirements of the Data Security & Protection Toolkit.
• Completion of the annual Data Security & Protection Toolkit submission and the collation of supporting evidence which is analysed and updated to ensure compliance.
• Lead a range of audits which will check compliance with the DSP toolkit, research and development and incident management activities, developing improved systems and processes for data quality, data security and protection, data integrity and availability.
• Work in partnership with the Groups Cyber Security Lead to ensure that all Cyber related toolkit assertions are met within the NHSD deadline and any gaps in assurance are identified with a plan in place for compliance.
• Implement and maintain compliance with relevant legislation, particularly the common law duty of confidentiality, the Data Protection Act 2018, the General Data Protection Regulation, the Computer Misuse Act 1990, the Human Rights Act 1998.
• Investigate and resolve information security issues and processes for systems which are process personal and/or trust sensitive data.
• Implement the DSP training strategy for the delivery of the Trust's IG training needs, ensuring that the Group meets the NHSD target for mandatory training, working in partnership with the Trust's Learning & Development service.
• Deliver information governance training if and when necessary.
• Implement policies and propose changes to Group DSP policies as appropriate, conducting monitoring compliance with those policies and protocols and ensuring they are compliant with Data Protection Act and GDPR legislation.
• Conduct data protection impact assessments (DPIA) where necessary and ensure the Group adheres to the data privacy by design and default as set out in Article 25 GDPR.
• Act as the UHN information security expert to ensure any identified risks are communicated to the Head of Technology and Head of Clinical Systems to enable new systems to be implemented safely.
• Assign DPIAs to relevant team members and ensure cross partnership working with relevant project and transformation leads.
• Ensure that all Group DPIAs, Assets, Flows and third parties are appropriately recorded on the Information Sharing Gateway and signed off by the relevant DPO and SIROs.
• Be an escalation point for the DSP analysts to ensure DPIAs are in line with GDPR legislation, redesigning systems, processes and procedures to meet the Data Security by Design and Default criteria.
• Communicate complex information to a range of audiences and be able to influence and persuade staff of the importance of excellent DSP standards.
• Lead the collation of relevant reports and information for compliance and performance reporting, inspections and internal assurance ensuring presentations articulate statistical, analytical and complex reporting to Group and Board mandated meetings.
• Coordinate the Data Governance Group and Information Governance Group meetings, ensuring relevant reports, minutes actions and decisions are recorded, delegating tasks to the DSP administrator as appropriate.
• Attend group, Trust and project meetings to provide expert Data Security and Protection advice and guidance to enable the effective adoption of expectations and policy.
• Coordinate reported incidents on Datix to ensure they are appropriately managed and actions are taken.
• Escalate incidents to the relevant DPO when they meet the criteria for a Serious Incident / reportable to the ICO.
• Manage the DSP Toolkit Incident reporting mechanism, ensuring all Serious Incident's are reported with 72 hours.
• Provide IG input, advice, guidance for Research & Development programmes.
• Deputise for the DSP Manager when required.
• Ensure that the Information Sharing Gateway is administered as appropriate in respect of maintaining significant assurance status across the group, being the lead and expert for use of the ISG, proposing recommendations for improvements to the national system for process, analytics and reporting.
• Coordinate the effective investigation of any and all IG related incidents, working with the relevant manager in whose service the incident occurred, where necessary, to ensure appropriate action has been taken in relation to the incident.
• To speak to staff, patients and family members on the telephone as an escalation point for the DSP analyst, demonstrating understanding, compassion and knowledge in difficult, challenging and emotional circumstances.
• Attend serious investigation panels and draft reports to the CCG which give assurance that due diligence has been carried out regarding all serious incidents.
• Ensure that a root cause analysis is performed on all serious incidents with relevant actions recorded, and acted upon to ensure such incidents do not re-occur.
• Work with the complaints team and directly with members of the public to communicate appropriately regarding any DSP grievances and queries.
• Maintain the Group Information Asset register and data flow maps and, also, where appropriate, provide training to Information Asset Owners and Administrators.
• Be a first point of contact for Data Subjects with regard to all issues related to processing of their personal data and to the exercise of their rights under the UK GDPR.
• Maintain specialist knowledge in Data Protection Law and UK GDPR.
• Update the Internet and Intranet pages for DSP as appropriate, ensuring it is up to date with pertinent advice and guidance, including applicable FAQs and relevant legislation.

Workforce

The Data Security & Protection Team Leader will have line management responsibility for the DSP Team, ensuring that all staff have annual performance reviews, objectives and appraisals in line with the Group objectives, ensuring they have the equipment necessary to fulfil their roles and the HR management tools are managed effectively. They will be an active role in recruitment, induction and local training.

• Ensure an adequate skill mix and that the office is appropriately managed.
• Provide specialised training, advice and guidance to DSP Team members as and when required.
• Manage the team in ensuring all members adhere to Trust Values and lead by example.
• Lead DSP Team recruitment.
• Ensure the e‑rostering system is signed off on a weekly basis.
• Carry out appraisals, team performance management and disciplinary processes.
• Be the lead contact for HR queries relating to the team.

Equal Opportunity and Diversity

We are an equal opportunities employer, which aims to employ a workforce that reflects the diverse communities we serve. We welcome applications from all suitably qualified persons from all backgrounds. We welcome applications from members of our black and minority ethnic (BME) communities, especially in relation to senior posts within at KGH.

Applicants who have a disability and meet the essential criteria for the job will be interviewed if you indicate you wish to be considered under the Guaranteed Interview Scheme. If you require a reasonable adjustment at any stage of the recruitment process please make the recruitment services team aware as soon as possible.

Appointments will be made on merit. In submitting an application form, you authorise Kettering General Hospital (KGH) NHS Foundation Trust to confirm any previous NHS service details via the Electronic Staff Record (ESR) Inter Authority Transfer (IAT) process, including factual reference, occupational health clearance and statutory and mandatory training record.

Application Requirements and Process

If you need to have a Disclosure Barring Service (DBS) check, as a requirement of the role, you will be required to repay the cost of obtaining a DBS check (£49.50) and this amount will be reclaimed from your first salary. From 1st February 2019 all new starters to the Trust are required to join the DBS update service as per Trust DBS Re-checking Policy which has an annual cost of £16. New employees who do not join the update service will be required to pay £49.50 for a new DBS check in 3 years time.

Please note that new starters with KGH are subject to a six month probationary period.

Ensure that the information you provide on your application form is correct, accurate and that nothing has been omitted. Any information that is stated in your application form in relation to qualifications/training courses/work/education experience/references must be able to be evidenced. Failure to do so may result in the offer being withdrawn.

Safeguarding

Safeguarding is everyone's business. KGH considers Safeguarding a priority amongst its citizens and a key value for all employed to the service.

Additional Information

We want to recruit the best people to deliver our services across the University Hospitals of Northamptonshire and help to unleash everyone's full potential. As an organisation, we value how we communicate and promote our vacancies to all communities. The Hospital Group encourages applications from people who identify from all protected groups, especially those from BAME, Disabled and LGBTQ+ backgrounds as these are underrepresented in our hospitals. We understand that we need to work with colleagues from diverse backgrounds and make sure the environment they work in is inclusive and collaborative. We have active Networks that promote and support colleagues from all backgrounds. This ensures everyone feels supported and has a sense of belonging working for Kettering and Northampton General Hospitals.