Governance & Compliance Lead (NHS DSPT & Datix)

NHS; Stowmarket; On-site; GBP 35,000 - 48,000; Full time

Benefits offered by this job

Defined benefits scheme

Life insurance

Family benefits

Ill health benefits

Electric Car Salary Sacrifice

Flexible working

Remote GP options

Health service discounts

Annual leave 33 days

Maternity/paternity terms

Job summary

Suffolk Primary Care, part of the NHS, is seeking a motivated Governance & Compliance Officer to support the Medical Director and Integrated Governance Committee. You will coordinate governance and data protection activities across SPC, ensuring inspection readiness and robust incident management.

The role leads Datix incident reporting, coordinates DSPT submissions, and acts as the main liaison with the DPO team to uphold UK GDPR standards.

Qualifications

• Experience conducting audits or compliance reviews.
• Knowledge of governance frameworks and risk management.
• Experience working within a GP surgery or NHS setting.
• Experience preparing for CQC inspections.
• Experience developing or delivering staff training.

Responsibilities

• Inspection Readiness – Support preparation for CQC inspections and external visits; support implementation and monitoring of required actions following inspections or audits.
• Committee Support – Prepare the agenda, produce reports, provide comprehensive support to the Medical Director for monthly IGC meetings.
• Policy Management – Oversee the centralised review, update, implementation, and communication of all governance policies and procedures across SPC practices.
• Audits – Conduct regular audits and self‑assessments against CQC and local ICB requirements.
• Datix Management – Act as system lead for incident reporting system (Datix); provide technical support, written guidance, staff training to ensure high‑quality, integrated incident reporting.
• Maintain the corporate risk register – Maintain risk register, ensuring robust mitigation plans; monitor SEAs, incidents, and complaints; identify trends; ensure shared learning embedded across practices.
• Information Governance & Data Protection – Act as primary conduit between SPC and DPO team; foster proactive relationship; manage data incidents; support DPAs; seek expert guidance on complex IG matters.
• DSPT – Lead preparation, compliance, submission of NHS Data Security and Protection Toolkit (DSPT); consulting DPO team to ensure standards met.
• Subject Access & FOI – Support practices in processing SARs, FOI requests; liaise with DPO team for complex/sensitive requests.
• Regulatory Responses – Coordinate with DPO team to manage, formulate, submit accurate responses to ICO enquiries.
• Continuous Improvement – Review and improve internal compliance systems, processes, governance frameworks with leadership team.
• Benchmarking – Benchmark SPC's performance and compliance against local and national standards; identify opportunities for innovation and quality improvement.

Skills

Governance knowledge

Data protection

CQC compliance

Auditing & assurance

Stakeholder management

Policy development

Education

A-Level or equivalent

Continued professional development

Healthcare management training

Tools

Datix

DSPT

Job description

Suffolk Primary Care, part of the NHS, is seeking a motivated Governance & Compliance Officer to support the Medical Director and Integrated Governance Committee. You will coordinate governance and data protection activities across SPC, ensuring inspection readiness and robust incident management.

The role leads Datix incident reporting, coordinates DSPT submissions, and acts as the main liaison with the DPO team to uphold UK GDPR standards.