Information Governance Compliance Officer

NHS; Colchester; On-site; GBP 29,000 - 37,000; Part time

Job summary

An established industry player in health and social care is seeking a dedicated Information Governance professional. This role is pivotal in leading Information Governance programs and ensuring compliance with data protection laws. You will engage with various stakeholders, conduct audits, and provide training on new systems. Join a community-focused organization that values care, innovation, and compassion, where your contributions will directly impact the quality of services delivered to the community. If you are passionate about safeguarding information and improving governance practices, this opportunity is for you.

Benefits

NHS Pension

Employee ownership

Community-focused work environment

Qualifications

• Minimum one year experience in Information Governance roles.
• Knowledge of Data Protection and Information Security standards.

Responsibilities

• Conduct Data Protection audits to ensure compliance.
• Maintain the Information Asset Register and Records of Processing Activities.

Skills

Data Protection

Information Governance

Compliance Monitoring

Project Coordination

Information Security

Education

Degree level education

Certified Information Systems Auditor (CISA)

PRINCE2 Project Management

Tools

PRINCE2

ITIL Framework

Job description

Job summary

The post holder will be a key member of the Information Governance (IG) team, providing a comprehensive, high quality, confidential service to Provide Group.

The post holder will perform a range of general and specialist duties associated with Information Governance systems and processes with particular focus on Compliance.

The prime objective of this role will be to lead on specific Information Governance programmes and to ensure that work is carried out effectively and professionally with specific responsibility for helping to develop and implement Information Security, Confidentiality and all key IG Policies and protocols across the Provide CIC and Group companies and to ensure compliance across the board.

The production and maintenance of accurate project documentation is an essential part of this role along with the coordination of time critical work.

Main duties of the job

• Carrying out Data Protection audits to monitor and assess compliance against IG Policies and Procedures, National Standards, Contractual clauses and relevant Data Protection Laws
• Ensure that the organisation's Information Asset Register (IAR) and Records of Processing Activities (ROPA) are maintained and remain compliant with the UK GDPR and DPA2018
• Liaising with IT and Cyber security team and other stakeholders with regards managing Information security risks and compliance with information security standards such as ISO27001, Cyber Essentials and the National Data Guardian Standards
• Provide training on the use of new IG systems and processes
• Support with the processing of Information Sharing Agreements
• Assist with completing Data Protection Impact Assessments (DPIA)
• Ensure the recording of all work is in line with the organisation's procedures, and ensure all requests are appropriately approved and authorised through the change control processes
• Programme and project administrative support when required, working to PRINCE2 Project Management standards
• Give support and guidance on evidence for completion of the DSP Toolkit, ensuring evidence is cohesive, self-explanatory and relevant to the financial year assessment
• Support the development, implementation, monitoring and maintenance of IG Policies and procedures to ensure that Provide CIC and Group companies comply with the Data Protection Act 2018, Access to Health Records Act and all other relevant data legislation

About us

Provide is a Community Interest Company (social enterprise). We deliver a broad range of health and social care services in the community, and are committed to making sure that they are safe, responsive and of high quality. Provide is owned by its employees and has primarily social objectives. Any profits we make are reinvested into the local community or back into delivering services.

We work from a variety of community settings, such as community hospitals, community clinics, schools, nursing homes and primary care settings, as well as within people's homes to provide more than 40 services to children, families and adults across Essex, Dorset, East Anglia and the North of England.A highly respected, award winning health and social care provider. We expect our staff to demonstrate and uphold our values at all times:

Vision: Transforming LivesValues: Care, Innovation and CompassionMission: An ambitious, employee owned social enterprise, growing in size and influence. We transform lives by treating, caring and educating people.

Provide is an equal opportunity employer committed to building a team that represents a variety of backgrounds, perspectives and skills, proud to have LGBT+ and Ethnic Minority Networks.

We welcome applicants from underrepresented groups. If you have the skills and experience for the job, please apply regardless of your background.

Eligible for NHS Pension

Details Date posted

08 May 2025

Pay scheme

Agenda for change

Band

Band 5

Salary

£29,970 to £36,483 a year Per annum

Contract

Permanent

Working pattern

Part-time

Reference number

828-PROVIDE3269-C

Job locations

Provide HQ

900 The Crescent, Colchester Business Park

Colchester

C04 9YQ

Job description Job responsibilities

Please see attached full Job Description (JD) for detailed job description and main responsibilities.

Job description Job responsibilities

Please see attached full Job Description (JD) for detailed job description and main responsibilities.

Person Specification Qualifications and Education Essential

• Educated to Degree level (or equivalent qualification) o Evidence of continuing personal development.

Desirable

• Certified Information Systems Auditor (CISA) o Recognised project management qualification such as PRINCE2 or equivalent project management experience o Specialist training in conducting a Data Protection impact Assessment (DPIA) o Specialist training in the Registration Authority process o Understand the ITIL framework and its principles o Foundation in Data Protection or equivalent qualification

Work Related Knowledge and Experience Essential

• At least one year of experience working in an Information Governance role providing support on all areas including Data Protection, Information sharing, Subject Access Requests, Incident Handling, Caldicott Guidelines, Information Security o Sound Knowledge in at least one of the specialisms listed above

Desirable

• Experience of working in a similar role in the health or care sector o Knowledge of assessing or monitoring compliance with either information security, data governance or quality standards and/or regulations o Understanding of Information Security Management principles o Experience of working within an ITIL framework o At least one year of experience in a project coordination role within the health or social care

Person Specification Qualifications and Education Essential

• Educated to Degree level (or equivalent qualification) o Evidence of continuing personal development.

Desirable

• Certified Information Systems Auditor (CISA) o Recognised project management qualification such as PRINCE2 or equivalent project management experience o Specialist training in conducting a Data Protection impact Assessment (DPIA) o Specialist training in the Registration Authority process o Understand the ITIL framework and its principles o Foundation in Data Protection or equivalent qualification

Work Related Knowledge and Experience Essential

• At least one year of experience working in an Information Governance role providing support on all areas including Data Protection, Information sharing, Subject Access Requests, Incident Handling, Caldicott Guidelines, Information Security o Sound Knowledge in at least one of the specialisms listed above

Desirable

• Experience of working in a similar role in the health or care sector o Knowledge of assessing or monitoring compliance with either information security, data governance or quality standards and/or regulations o Understanding of Information Security Management principles o Experience of working within an ITIL framework o At least one year of experience in a project coordination role within the health or social care

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.

Certificate of Sponsorship

Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).

From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).

Additional information Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.

Certificate of Sponsorship

Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).

From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).

Employer details Employer name

Provide CIC

Address

Provide HQ

900 The Crescent, Colchester Business Park

Colchester

C04 9YQ

Employer's website

https://www.provide.org.uk/ (Opens in a new tab)

Employer details Employer name

Provide CIC

Address

Provide HQ

900 The Crescent, Colchester Business Park

Colchester

C04 9YQ

Employer's website

https://www.provide.org.uk/ (Opens in a new tab)