EPR Information Governance Lead

South London and Maudsley NHS Foundation Trust; United Kingdom; Hybrid; GBP 45,000 - 55,000; Full time

Job summary

A prominent NHS Trust in the UK seeks an EPR Information Governance Lead to oversee the implementation of a new Electronic Patient Record system. You will lead all information governance activities, ensuring compliance with data protection laws and contributing to a significant digital transformation project. The role demands extensive knowledge of NHS data governance and offers opportunities for professional development. Enjoy flexible working arrangements to maintain a healthy work-life balance.

Benefits

Ongoing training and development

Flexible working options

Support for career progression

Qualifications

• Degree or equivalent experience. BCS Practitioner Certificate in Data Protection or equivalent.
• Extensive knowledge of Information Governance and Data Protection within the NHS.
• Able to demonstrate a track record of achievement at a senior level.

Responsibilities

• Lead on all IG-related activities across the EPR Programme lifecycle.
• Provide specialist advice on IG and data protection risks.
• Develop and maintain programme-level IG artefacts.
• Ensure alignment with UK GDPR and NHS guidance.
• Act as the key point of contact for IG matters within the EPR Programme.

Skills

Knowledge of Information Governance

Proactive and collaborative attitude

Excellent interpersonal skills

Analytical and report writing skills

Ability to manage competing priorities

Education

Degree or equivalent experience

BCS Practitioner Certificate in Data Protection or equivalent

Job description

South London and Maudsley NHS Foundation Trust has a rich history, well-established community links and an international reputation. We deliver specialist services in the London boroughs of Croydon, Lambeth, Lewisham and Southwark, Bexley, Bromley, Greenwich, Wandsworth and Richmond.

We are committed to providing a high quality and specialist care to our service users and we are recognised for our care and treatment we provide. The Care Quality Commission already rates our services as 'good'.

We launched our five-year strategy, Aiming High; Changing Lives in 2021 together with Our Care Improvement System as our quality management system methodology to make a positive impact on patient care, outcomes and staff experience. By joining SLaM, all staff will get the opportunity to be part of this exciting improvement journey supported with learning and development to harness everyone's potential as change makers.

The trust recognises the unique and valuable contribution that people with lived experience of mental illness can bring to a role. We therefore welcome applications from people with lived experience and consider them as an asset to the Trust.

Our Values

We take pride in providing specialist care to our service users where our Trust values and our promise to be caring, kind, polite, prompt, honest, listen and do what I say I'm going to do is at the heart of everything we do. When you join us, you'll be part of something special.

As a Trust we are happy to talk flexible working.

Job overview

This is an exciting opportunity to contribute to a major digital initiative designed to transform the delivery of care at South London and Maudsley NHS Foundation Trust (SLaM). The Electronic Patient Record (EPR) Programme stands as one of the most ambitious change projects in the Trust's history. Its aim is to streamline staff workflows, enhance safety, and ultimately achieve improved outcomes for service users.

Career Progression pathways and development opportunities

We are committed to get the very best out of our staff and support staff in their career aspirations. We have career pathways available, where you will be able to develop your skills and build on your experience to progress into other roles across different specialties. In addition, we offer ongoing training and development in conjunction with the BCS membership.

Main duties of the job

The EPR Information Governance Lead is central to the successful implementation and integration of a new Electronic Patient Record system. This pivotal role is responsible for leading on all information governance activity associated with the design, testing, implementation and adoption of the new EPR, working alongside the Trust Data Protection Officers (DPOs) and other colleagues to ensure that SLaM's EPR Programme takes appropriate actions to enable the Trusts to continue to meet their statutory obligations with regards Information Governance and Data Protection.

As the programme's IG subject matter expert, the post-holder will interpret National policy and guidance and will lead on the development and/or modification of IG related programme collateral including Data Privacy Impact Assessment documents, Data Sharing/Data Processing agreements and Data Security & Protection Toolkits (DSPTs). The post-holder will lead on the mitigation and oversee the management of data risks associated with the implementation of the EPR across the Trust.

Flexible working

As one of the few Trusts in London we are proud to offer flexible working as part of our new ways of working, and we are happy to talk flexible working at the interview stage. In this role you will be able to work Monday to Friday in the time frames from 8am to 6pm, giving you the very best of good work life balance.

Working for our organisation

This role is in the Digital PMO which sits under the Digital Services Directorate. The Directorate utilises technology and digital solutions to empower our staff to work effectively and to improve the care our service users receive.

About our locations

The Digital team are located across 3 main sites;

Maudsley Hospital (headquarters)

Our Trust headquarters is located at Denmark Hill less than 5 minutes from the train station (zone 2) and is within walking distance from the beautiful green spaces of Ruskin park and the vibrant high-street that offers great shopping opportunities and with a wide range restaurants.

St Pauls

St Pauls is located within the Bromley area and is less than 10 minutes from the train stations (Bromley South, Bromley North and Shortlands) It is within walking distance from the beautiful green spaces of Bromley Park and the vibrant high-street that offers great shopping opportunities and with a wide range restaurants.

Bethlem Royal Hospital

Bethlem Royal Hospital is based in a beautiful setting in over 200 acres of green space in the London Borough of Bromley, South East London. The hospital has easy access to nearby main roads and have offers free parking. The site is within walking distance from of Eden Park and West Wickham overland stations.

Detailed job description and main responsibilities

Key Responsibilities:

1. Information Governance Leadership

   Support the DPO by leading on all IG-related activities across the EPR Programme lifecycle, from procurement and design to go-live and post-implementation.

   Provide specialist advice and assurance to the EPR Programme Board, SRO, and Programme Director on IG and data protection risks, controls, and mitigations.

   Develop and maintain programme-level IG artefacts including:

   • Data Protection Impact Assessments (DPIAs)
   • Data Sharing / Processing Agreements
   • Privacy Notices and Records of Processing Activities
   • IG Risk Registers and Mitigation Plans

   Embed "data protection by design and by default" principles in all new workflows, integrations, and supplier relationships.

   Ensure all IG artefacts gain appropriate internal approval

2. Data Protection Compliance

   Ensure that the EPR Programme aligns with UK GDPR, the Data Protection Act 2018, and NHS guidance.

   Support the DPO in monitoring and evidencing compliance, and ensure all relevant activities are reflected in the Trust's Data Security and Protection Toolkit (DSPT).

   Review and assure supplier contracts to ensure robust data processing clauses and lawful data sharing arrangements.

   Lead on the management of IG incidents and support Root Cause Analysis (RCA) in relation to the programme.

3. Liaison and Partnership

   Act as the key point of contact for all IG and data protection matters within the EPR Programme.

   Work collaboratively with:

   • The Trust's DPO, SIRO, and Caldicott Guardian
   • Digital Security and Clinical Safety Officers
   • Legal and Procurement teams
   • Third‑party suppliers (e.g., system vendors, integration partners)
   • Information Governance and Records Management teams across SLaM and the wider South London Partnership (SLP)

   Ensure alignment with regional and national data protection standards and share best practice with other Trusts undertaking EPR implementations.

4. Assurance and Reporting

   Develop and maintain programme‑level IG dashboards and reports for governance forums (e.g. Programme Board, SIRO reports, and Trust Information Governance Group).

   Provide expert input into programme risk registers and contribute to external assurance reviews (e.g. IG audits, compliance inspections).

   Liaise with the Information Commissioner’s Office (ICO) where necessary, supporting the DPO in formal submissions.

5. Policy, Training, and Culture

   Support the update and development of relevant Trust policies relating to data protection, confidentiality, and records management as they pertain to the EPR.

   Promote an open and informed culture around data protection and IG awareness within the EPR Programme and wider clinical teams.

   Develop and deliver IG training materials specific to the new EPR and associated change programmes.

   Support embedding of the Caldicott and confidentiality principles within the system’s design and rollout.

Person specification

Qualifications

Essential criteria

• Degree or equivalent experience. BCS Practitioner Certificate in Data Protection or equivalent.

Desirable criteria

• MSc in Information Governance / Law / Health Informatics. Professional registration with IAPP or BCS.

Knowledge and skills

Essential criteria

• Extensive knowledge of Information Governance and Data Protection within the NHS, including GDPR, DPA 2018, Caldicott Principles, DSPT. Experience leading IG in a large NHS digital transformation or EPR implementation. Experience interpreting complex legislation and applying it to digital and clinical workflows.
• Proactive, collaborative, and diplomatic. High integrity and commitment to confidentiality. Comfortable working in a complex and changing environment.
• Excellent interpersonal and influencing skills across technical and clinical teams. Strong analytical and report writing skills. Ability to manage competing priorities and deliver to tight deadlines.
• Extensive operational expertise and knowledge in Information Governance and Information Security principles and practices
• Knowledge and understanding of the NHS Data Security and Protection Toolkit
• Substantial management experience at a senior level
• Able to demonstrate a track record of achievement at a senior level
• Ability to provide and receive highly complex, highly sensitive or highly contentious information, where developed persuasive, motivational, negotiation, training, empathic or re‑assurance skills are required.
• Ability to present complex, sensitive or contentious information to a large group
• Ability to make judgements on multi‑stranded or complex IM&T problems which may have no precedent or where there are conflicting opinions
• Ability to manage, motivate and develop staff
• Collaborative approach and good team working

Desirable criteria

• Previous experience of working directly with EPR systems (e.g., Cerner, Epic, RiO, CareNotes (ePJS)). Experience of multi‑Trust or regional IG collaboration.
• Experience of line managing IG or data protection staff.

The Trust is committed to providing services which embrace diversity and that promote equality of opportunity. We are a Disability Confident Employer, we welcome applicants from all sections of the community and people of all protected characteristics. We provide reasonable adjustments for candidates with a disability and are committed to treating people fairly with compassion, respect and dignity and in promoting equality and human rights. We aim to put this commitment into practice by:

• Embedding our commitment to tackling inequality, eliminating discrimination and harassment; promoting equality of opportunity and fostering good relations in our everyday practice
• Ensuring that all our services and all staff understand and support our commitment
• We believe that people who use our services, their carers and our staff, should be treated with compassion, respect and dignity

Please note:

• That all applications for this post will need to be made online
• That you read and understand the Job Description and Person Specification attached to the role. Your Statement in Support should reflect the requirements specified as your application will be judged against these criteria
• That the closing date listed is a guide only and that the vacancy may close earlier should sufficient number of applicants have been received. We advise that you submit your application as early as possible
• That once you have submitted your application you agree to your application being transferred to a 3rd party e‑recruitment system. All subsequent information regarding your application will be generated from apps.trac.jobs
• That should you not have heard from us within three weeks from the closing date your application has not been successful
• That priority consideration for applications may be given to at‑risk NHS employees
• That should you be successful and appointed, you authorise South London and Maudsley NHS Foundation Trust to confirm your previous NHS service via an Inter Authority Transfer (IAT) process
• That we are a smoke‑free Trust

SLaM is a Stonewall Diversity Champion , Stonewall is the largest Lesbian, Gay, Bi and Trans (LGBT) rights charity in Europe

Helpful Resource: How to Use TRAC for Job Applications

If you're preparing to apply for a role, this guide provides step‑by‑step instructions on how to use TRAC effectively throughout the application process: Using TRAC to apply

Employer certification / accreditation badges Documents to download

• jd (PDF, 616.5KB)
• SLaM Staff Benefits (PDF, 1.1MB)
• Happy to Talk Flexible Working (PDF, 680.1KB)