Governance & Compliance Manager

Primary Eyecare; Manchester; Hybrid; GBP 60,000 - 80,000; Full time

Benefits offered by this job

Pension match up to 5%

25 days annual leave

Training and Development Opportunities

Performance-related pay

Employee Assistance Programme (EAP)

Cycle to Work scheme

Job summary

Primary Eyecare Services is seeking an experienced Governance & Compliance Manager to oversee governance, compliance, risk management, information governance and assurance across the organisation. Reporting to the Director of Quality & Governance, you will lead governance workplans, policy management and continuous improvement efforts.

You will support audits, regulatory inspections and external reviews, while promoting a culture of accountability and resilience.

Qualifications

• Significant experience in governance, compliance, quality, risk, assurance or information governance functions.
• Experience coordinating audits, inspections, accreditations or external reviews.
• Knowledge of UK GDPR, Data Protection Act 2018 and NHS information governance requirements.
• Experience developing policies, procedures and assurance documentation.

Responsibilities

• Lead governance, compliance, risk, information governance, assurance and resilience activities across the organisation.
• Coordinate governance workplans and assurance activities and ensure actions are completed.
• Prepare governance papers and updates for senior management and stakeholders.
• Manage governance communication, enquiries and documentation across teams.
• Support Business Continuity and Disaster Recovery planning and organisational resilience.

Skills

Governance experience

Compliance knowledge

Risk management

Data protection

Information governance

Policy development

Audit readiness

Education

Relevant qualification in governance, compliance, risk, quality or data protection

Job description

Organisation
Primary Eyecare Services

Job Title
Governance and Compliance Manager

Accountable to
Director of Quality & Governance

Terms
Full-time

Hours
35 hours per week

Remuneration

Location
Hybrid working (60% home, 40% office)

Benefits
Pension match up to 5%
25 days annual leave
Training and Development Opportunities
Performance-related pay
Employee Assistance Programme (EAP)
Cycle to Work scheme

About Primary Eyecare Services

Primary Eyecare Services is the largest not-for-profit provider of NHS primary and community eye care services in England. Working with commissioners and healthcare partners nationwide, we support the delivery of accessible, high-quality eye care through a network of more than 3,000 optometry practices.

As we continue to grow and evolve, effective governance, compliance and assurance remain central to delivering safe, resilient and high-quality services.

About the Role

We are seeking an experienced Governance & Compliance Manager to lead and coordinate governance, compliance, risk management, information governance, assurance and organisational resilience activities across the organisation.

Reporting to the Director of Quality & Governance, you will play a key role in ensuring Primary Eyecare Services maintains effective governance arrangements, meets statutory and regulatory obligations, and is able to provide robust assurance to internal and external stakeholders.

Working closely with senior leaders across the business, you will support the development of a positive governance culture, promote continuous improvement and help ensure the organisation remains audit-ready, compliant and resilient.

This role also provides leadership to Governance Officers and is responsible for overseeing governance workplans, assurance activities, policy management and organisational improvement initiatives.

Why This Role Matters

This role is central to ensuring Primary Eyecare Services remains:

• Compliant with legal, regulatory and contractual requirements
• Prepared for audit, inspection and assurance activity
• Effective in managing organisational risk
• Resilient and prepared for disruption
• Supported by robust governance processes and controls
• Committed to continuous improvement

Key Responsibilities

Information Governance & Data Protection

You will:

• Lead and monitor compliance with UK GDPR, the Data Protection Act 2018 and NHS information governance requirements.
• Provide practical advice on information governance, confidentiality, records management and data sharing.
• Oversee Data Protection Impact Assessments (DPIAs) and information sharing arrangements.
• Coordinate responses to Data Subject Rights Requests and Freedom of Information requests.
• Lead investigations into information governance incidents and personal data breaches.
• Maintain information governance records, registers and assurance documentation.
• Coordinate completion of the Data Security and Protection Toolkit (DSPT).
• Promote information governance awareness and compliance throughout the organisation.

Risk, Assurance & Compliance

You will:

• Support and maintain the organisation’s risk management framework.
• Monitor governance and compliance workplans and ensure actions are completed.
• Coordinate organisational readiness for audits, inspections and accreditation reviews
• Act as a key contact during external assurance activities.
  Maintain assurance evidence and compliance records.
• Track corrective actions and improvement plans through to completion.

Policy & Document Control

You will:

• Lead the policy and document control framework.
• Maintain policy registers and review schedules.
• Support document owners with policy development and review activity.
• Quality assure policies, procedures and standard operating procedures.
• Ensure effective version control, publication and communication arrangements.

Governance Reporting & Support

You will:

• Produce governance, compliance, risk and assurance reports.
• Prepare papers and assurance updates for senior management and stakeholders.
• Support governance meetings and action tracking.
• Oversee governance correspondence and enquiries.
• Manage governance workstreams and monitor progress against agreed objectives.
• Support the development of organisational publications and statutory declarations.

Continuous Improvement & Organisational Resilience

You will:

• Analyse governance and compliance data to identify trends and opportunities.
• Monitor legislative, regulatory and NHS developments.
• Implement improvements to governance systems and processes.
• Lead the development and review of Business Continuity and Disaster Recovery arrangements.
• Support organisational resilience, incident response and governance projects.
• Promote a culture of accountability, learning and continuous improvement.

What We’re Looking For

We welcome applications from candidates with a strong background in governance, compliance, risk, assurance, information governance or related disciplines.

Experience

• Significant experience within governance, compliance, quality, risk, assurance or information governance functions.
• Experience managing complex programmes of work and competing priorities.
• Experience coordinating audits, inspections, accreditations or external reviews.
• Experience developing policies, procedures, governance frameworks and assurance documentation.
• Experience influencing stakeholders and providing advice at varying levels of an organisation.

Knowledge

• Working knowledge of UK GDPR and the Data Protection Act 2018.
• Knowledge of governance, risk management and compliance principles.
• Understanding of audit, assurance and continuous improvement approaches.

Skills & Attributes

• Excellent written and verbal communication skills.
• Strong analytical and problem-solving capability.
• Ability to produce clear reports and recommendations.
• Strong organisational skills and attention to detail.
• Ability to work independently and make sound judgements.
• Commitment to professionalism, integrity and confidentiality.
• Ability to support and develop others.
• Experience within the NHS, healthcare or another highly regulated environment.
• Knowledge of:
  • Data Security and Protection Toolkit (DSPT)
  • DTAC
  • CQC requirements: ISO 9001 • ISO 14001 • ISO 27001 • Cyber Essentials
• Experience supporting certified management systems.
• Relevant qualification in governance, compliance, risk, quality or data protection.
• Previous line management or supervisory experience.
• Your most up-to-date CV, including a valid email address and contact details.
• A separate document containing responses to all application questions listed below.

Closing Date

Applications must be received by 3:00pm on Friday 23 October 2026.

Applications received after this deadline may not be considered.

We reserve the right to close this vacancy early should a sufficient number of suitable applications be received. Early applications are therefore encouraged.

Additional Information

Unfortunately, Primary Eyecare Services is unable to offer visa sponsorship for this position.

Primary Eyecare Services is committed to creating an inclusive workplace and welcomes applications from all suitably qualified candidates. should be clear, concise and based on your own knowledge, skills and experience.