Governance & Compliance Officer

NHS; Stowmarket; On-site; GBP 35,000 - 48,000; Full time

Benefits offered by this job

Defined benefits scheme

Life insurance

Family benefits

Ill health benefits

Electric Car Salary Sacrifice

Flexible working

Remote GP options

Health service discounts

Annual leave 33 days

Maternity/paternity terms

Job summary

Suffolk Primary Care, part of the NHS, is seeking a motivated Governance & Compliance Officer to support the Medical Director and Integrated Governance Committee. You will coordinate governance and data protection activities across SPC, ensuring inspection readiness and robust incident management.

The role leads Datix incident reporting, coordinates DSPT submissions, and acts as the main liaison with the DPO team to uphold UK GDPR standards.

Qualifications

• Experience conducting audits or compliance reviews.
• Knowledge of governance frameworks and risk management.
• Experience working within a GP surgery or NHS setting.
• Experience preparing for CQC inspections.
• Experience developing or delivering staff training.

Responsibilities

• Inspection Readiness – Support preparation for CQC inspections and external visits; support implementation and monitoring of required actions following inspections or audits.
• Committee Support – Prepare the agenda, produce reports, provide comprehensive support to the Medical Director for monthly IGC meetings.
• Policy Management – Oversee the centralised review, update, implementation, and communication of all governance policies and procedures across SPC practices.
• Audits – Conduct regular audits and self‑assessments against CQC and local ICB requirements.
• Datix Management – Act as system lead for incident reporting system (Datix); provide technical support, written guidance, staff training to ensure high‑quality, integrated incident reporting.
• Maintain the corporate risk register – Maintain risk register, ensuring robust mitigation plans; monitor SEAs, incidents, and complaints; identify trends; ensure shared learning embedded across practices.
• Information Governance & Data Protection – Act as primary conduit between SPC and DPO team; foster proactive relationship; manage data incidents; support DPAs; seek expert guidance on complex IG matters.
• DSPT – Lead preparation, compliance, submission of NHS Data Security and Protection Toolkit (DSPT); consulting DPO team to ensure standards met.
• Subject Access & FOI – Support practices in processing SARs, FOI requests; liaise with DPO team for complex/sensitive requests.
• Regulatory Responses – Coordinate with DPO team to manage, formulate, submit accurate responses to ICO enquiries.
• Continuous Improvement – Review and improve internal compliance systems, processes, governance frameworks with leadership team.
• Benchmarking – Benchmark SPC's performance and compliance against local and national standards; identify opportunities for innovation and quality improvement.

Skills

Governance knowledge

Data protection

CQC compliance

Auditing & assurance

Stakeholder management

Policy development

Education

A-Level or equivalent

Continued professional development

Healthcare management training

Tools

Datix

DSPT

Job description

We are seeking a motivated and reliable Governance & Compliance Officer to support our Medical Director and Integrated Governance Committee (IGC). This role supports the day‑to‑day coordination of Suffolk Primary Care's governance and compliance activity across our growing primary care organisation.

We are looking for someone who has strong organisational skills, attention to detail, and the ability to work supportively across multiple teams and priorities. The ideal candidate will have excellent verbal and written communication skills and the ability to manage multiple priorities to meet deadlines. Experience working within a GP surgery or NHS setting, as well as part of a governance team, is desirable but not essential.

We offer a competitive salary along with various employee benefits, and the opportunity to join the NHS pension scheme.

Main duties of the job

The successful candidate will play a key role in ensuring our governance processes run smoothly and efficiently. Key responsibilities include:

• Providing administrative and coordination support for CQC compliance.
• Managing incident reporting as the lead for our incident reporting system Datix.
• Acting as the principal liaison with our Data Protection Officer (DPO) team to uphold robust data protection and UK GDPR standards across the organisation.
• Leading the preparation and successful submission of the annual NHS Data Security and Protection Toolkit (DSPT).

About us

Suffolk Primary Care (SPC) is a forward‑thinking partnership of GP surgeries across Suffolk. Our collaborative approach enables doctors and staff to share resources, ensuring the continued delivery of high‑quality healthcare.

We are committed to equal employment opportunities and encourage applications from all qualified individuals.

Benefits of Working with SPC

• Defined benefits scheme
• Life insurance
• Family benefits, including adult dependents & children's pensions
• Ill health benefits

Electric Car Salary Sacrifice Scheme

• Fully comprehensive insurance, servicing, tyres & breakdown cover
• Up to £2,000 annual SPC contribution (subject to conditions)

Flexible Working Arrangements

GP remote working options to accommodate personal commitments

Additional Benefits

• Health service discounts, including a complimentary Blue Light Card for new starters
• Minimum 33 days annual leave (inclusive of bank holidays) for full‑time employees, with enhancements for long service
• Enhanced maternity & paternity terms
• Salary sacrifice schemes for technology, homewares (Currys, John Lewis, Decathlon), cycling, and gym memberships

At SPC, we invest in our staff's professional growth and well‑being, fostering a positive work environment that benefits both our team and the communities we serve.

Job responsibilities

• Inspection Readiness – Support preparation for CQC inspections and external visits; support implementation and monitoring of required actions following inspections or audits.
• Committee Support – Prepare the agenda, produce reports, provide comprehensive support to the Medical Director for monthly IGC meetings.
• Policy Management – Oversee the centralised review, update, implementation, and communication of all governance policies and procedures across SPC practices.
• Audits – Conduct regular audits and self‑assessments against CQC and local Integrated Care Board (ICB) requirements.
• Datix Management – Act as system lead for incident reporting system (Datix); provide technical support, written guidance, staff training to ensure high‑quality, integrated incident reporting.
• Maintain the corporate risk register – Maintain risk register, ensuring robust mitigation plans; monitor Significant Event Analyses (SEAs), incidents, and complaints; identify trends; ensure shared learning embedded across practices.
• Information Governance & Data Protection – Act as primary conduit between SPC and DPO team; foster proactive relationship; manage data incidents; support DPIAs; seek expert guidance on complex IG matters.
• DSPT – Lead preparation, compliance, submission of NHS Data Security and Protection Toolkit (DSPT); consulting DPO team to ensure standards met.
• Subject Access & FOI – Support practices in processing SARs, FOI requests; liaise with DPO team for complex/sensitive requests.
• Regulatory Responses – Coordinate with DPO team to manage, formulate, submit accurate responses to ICO enquiries.
• Continuous Improvement – Review and improve internal compliance systems, processes, governance frameworks with leadership team.
• Benchmarking – Benchmark SPC's performance and compliance against local and national standards; identify opportunities for innovation and quality improvement.

Person Specification

Experience

• Experience conducting audits or compliance reviews
• Knowledge of governance frameworks and risk management
• Experience working within a GP surgery or NHS setting
• Experience preparing for CQC inspections
• Experience developing or delivering staff training

Qualifications

• Educated to A-Level standard or equivalent
• Evidence of ongoing professional development
• Training in healthcare management, quality assurance, or CQC compliance and governance.

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.