EPR Information Governance Lead

South London and Maudsley NHS Foundation Trust; City Of London; On-site; GBP 50,000 - 64,000; Full time

Job summary

A prominent healthcare organization in England is seeking a skilled professional to lead information governance within the Electronic Patient Record Programme. This role involves ensuring compliance with UK GDPR regulations, advising on data protection risks, and fostering an open culture around data awareness. Ideal candidates will possess strong leadership and communication abilities, with a commitment to inclusivity and continuous professional development. This position promises a dynamic work environment promoting a balance between personal and professional growth.

Benefits

Flexible working hours

Opportunity for career progression

Ongoing training and development

Qualifications

• Proven experience in information governance leadership and compliance.
• Strong knowledge of UK GDPR and NHS guidance.
• Excellent communication skills for liaising with various stakeholders.

Responsibilities

• Lead on all IG-related activities across the EPR Programme lifecycle.
• Ensure compliance with UK GDPR and Data Protection Act 2018.
• Act as key contact for IG and data protection matters.

Skills

Leadership

Data protection compliance

Communication

Collaboration

Education

Relevant qualifications in data protection or information governance

Job description

This is an exciting opportunity to contribute to a major digital initiative designed to transform the delivery of care at South London and Maudsley NHS Foundation Trust (SLaM). The Electronic Patient Record (EPR) Programme stands as one of the most ambitious change projects in the Trust's history. Its aim is to streamline staff workflows, enhance safety, and ultimately achieve improved outcomes for service users.

Career Progression pathways and development opportunities:
We are committed to get the very best out of our staff and support staff in their career aspirations. We have career pathways available, where you will be able to develop your skills and build on your experience to progress into other roles across different specialties. In addition, we offer ongoing training and development in conjunction with the BCS membership.

Benefits

Flexible working: As one of the few Trusts in London we are proud to offer flexible working as part of our new ways of working, and we are happy to talk flexible working at the interview stage. In this role you will be able to work Monday to Friday in the time frames from 8am to 6pm, giving you the very best of good work life balance.

Location: Maudsley Hospital (headquarters)
Our Trust headquarters is located at Denmark Hill less than 5 minutes from the train station (zone 2) and is within walking distance from the beautiful green spaces of Ruskin park and the vibrant high‑street that offers great shopping opportunities and with a wide range restaurants.
St Pauls
St Pauls is located within the Bromley area and is less than 10 minutes from the train stations (Bromley South, Bromley North and Shortlands) It is within walking distance from the beautiful green spaces of Bromley Park and the vibrant high‑street that offers great shopping opportunities and with a wide range restaurants.
Bethlem Royal Hospital
Bethlem Royal Hospital is based in a beautiful setting in over 200 acres of green space in the London Borough of Bromley, South East London. The hospital has easy access to nearby main roads and have offers free parking. The site is within walking distance from of Eden Park and West Wickham overland stations.

Responsibilities

1. 1. Information Governance Leadership
   • Support the DPO by leading on all IG-related activities across the EPR Programme lifecycle, from procurement and design to go‑live and post‑implementation.
   • Provide specialist advice and assurance to the EPR Programme Board, SRO, and Programme Director on IG and data protection risks, controls, and mitigations.
   • Develop and maintain programme‑level IG artefacts including:
   • Data Protection Impact Assessments (DPIAs)
   • Data Sharing / Processing Agreements
   • Privacy Notices and Records of Processing Activities
   • IG Risk Registers and Mitigation Plans
   • Embed data protection by design and by default principles in all new workflows, integrations, and supplier relationships.
   • Ensure all IG artefacts gain appropriate internal approval.
2. 2. Data Protection Compliance
   • Ensure that the EPR Programme aligns with UK GDPR, the Data Protection Act 2018, and NHS guidance.
   • Support the DPO in monitoring and evidencing compliance, and ensure all relevant activities are reflected in the Trust's Data Security and Protection Toolkit (DSPT).
   • Review and assure supplier contracts to ensure robust data processing clauses and lawful data sharing arrangements.
   • Lead on the management of IG incidents and support Root Cause Analysis (RCA) in relation to the programme.
3. 3. Liaison and Partnership
   • Act as the key point of contact for all IG and data protection matters within the EPR Programme.
   • Work collaboratively with the Trust's DPO, SIRO, and Caldicott Guardian; Digital Security and Clinical Safety Officers; Legal and Procurement teams; Third‑party suppliers (e.g., system vendors, integration partners); Information Governance and Records Management teams across SLaM and the wider South London Partnership (SLP).
   • Ensure alignment with regional and national data protection standards and share best practice with other Trusts undertaking EPR implementations.
4. 4. Assurance and Reporting
   • Develop and maintain programme‑level IG dashboards and reports for governance forums (e.g. Programme Board, SIRO reports, and Trust Information Governance Group).
   • Provide expert input into programme risk registers and contribute to external assurance reviews (e.g. IG audits, compliance inspections).
   • Liaise with the Information Commissioner's Office (ICO) where necessary, supporting the DPO in formal submissions.
5. 5. Policy, Training, and Culture
   • Support the update and development of relevant Trust policies relating to data protection, confidentiality, and records management as they pertain to the EPR.
   • Promote an open and informed culture around data protection and IG awareness within the EPR Programme and wider clinical teams.
   • Develop and deliver IG training materials specific to the new EPR and associated change programmes.
   • Support embedding of the Caldicott and confidentiality principles within the system's design and rollout.

Equity, Diversity and Inclusion

The Trust is committed to providing services which embrace diversity and that promote equality of opportunity. We are a Disability Confident Employer, we welcome applicants from all sections of the community and people of all protected characteristics. We provide reasonable adjustments for candidates with a disability and are committed to treating people fairly with compassion, respect and dignity and in promoting equality and human rights.

• Embedding our commitment to tackling inequality, eliminating discrimination and harassment; promoting equality of opportunity and fostering good relations in our everyday practice.
• Ensuring that all our services and all staff understand and support our commitment.
• We believe that people who use our services, their carers and our staff, should be treated with compassion, respect and dignity.

Application Notes

• All applications for this post will need to be made online.
• Read and understand the Job Description and Person Specification attached to the role. Your Statement in Support should reflect the requirements specified as your application will be judged against these criteria.
• The closing date listed is a guide only and the vacancy may close earlier should a sufficient number of applicants have been received. We advise that you submit your application as early as possible.
• Once you have submitted your application you agree to your application being transferred to a 3rd party e‑recruitment system. All subsequent information regarding your application will be generated from apps.trac.jobs.
• If you do not hear from us within three weeks from the closing date your application has not been successful.
• Priority consideration for applications may be given to at‑risk NHS employees.
• Should you be successful and appointed, you authorise South London and Maudsley NHS Foundation Trust to confirm your previous NHS service via an Inter Authority Transfer (IAT) process.
• We are a smoke‑free Trust.

Additional Information

Helpful Resource: How to Use TRAC for Job Applications – If you're preparing to apply for a role, this guide provides step‑by‑step instructions on how to use TRAC effectively throughout the application process: Using TRAC to apply.

NHS AfC: Band 8b

South London and Maudsley NHS Foundation Trust has a rich history, well‑established community links and an international reputation. We deliver specialist services in the London boroughs of Croydon, Lambeth, Lewisham and Southwark, Bexley, Bromley, Greenwich, Wandsworth and Richmond. We are committed to provide a high quality and specialist care to our service users and we are recognised for our care and treatment we provide. The Care Quality Commission already rates our services as 'good'. We launched our five‑year strategy, Aiming High; Changing Lives in 2021 together with Our Care Improvement System as our quality management system methodology to make a positive impact on patient care, outcomes and staff experience. By joining SLaM, all staff will get the opportunity to be part of this exciting improvement journey supported with learning and development to harness everyone's potential as change makers. The trust recognises the unique and valuable contribution that people with lived experience of mental illness can bring to a role. We therefore welcome applications from people with lived experience and consider them as an asset to the Trust.

Our Values: We take pride in providing specialist care to our service users where our Trust values and our promise to be caring, kind, polite, prompt, honest, listen and do what I say I'm going to do is at the heart of everything we do. When you join us, you'll be part of something special.