Head of IG & Data Protection Officer

NHS; London; On-site; GBP 82,000 - 94,000; Full time

Job summary

Join a leading NHS Foundation Trust in London as a senior leader in Information Governance. This role encompasses strategic oversight and operational management of data protection services, ensuring compliance and support for clinical teams across major Trusts. Ideal candidates will possess substantial experience in UK healthcare and demonstrated leadership in data governance.

Qualifications

• Significant experience in Information Governance leadership.
• Experience in UK Healthcare as Data Protection Officer or similar.
• Expertise in delivering data protection compliance and strategy.

Responsibilities

• Provide independent advice on data protection and Information Governance.
• Ensure compliance with data protection legislation and Trust obligations.
• Lead the delivery of the annual Information Governance service plan.

Skills

Leadership

Data Protection

Change Management

Education

Qualifications in Information Governance / Data Protection

Job description

Job summary

This is an exciting opportunity to play a significant role in the senior leadership and operational management of Information Governance and medical records services across two of the largest NHS Foundation Trusts in London.

Guy's & St Thomas', with over 23,000 dedicated staff, operates from 5 main hospitals - Guy's Hospital, St Thomas' Hospital, Evelina London Children's Hospital, Royal Brompton Hospital and Harefield Hospital, and in the community.

King's College Hospital NHS Foundation Trust, employing over 15,000 staff, is also one of the biggest and busiest Trusts in the country, primarily serving the London Boroughs of Southwark, Lambeth and Bromley, with a population of over 1 million people, and acting as a referral centre for millions more. Our specialist services are also available to patients from a wider area, and we provide nationally and internationally recognised treatment.

This role will provide senior leadership and advice on Information Governance and data protection matters for all Trust services, programmes and projects. The successful applicant will ensure expert advice and support to policy development, to create and maintain high level awareness, profile and understanding of the strategic and practical importance of data protection and IG, and to ensure that the highest level of subject matter expertise and support is provided to the Trusts in order to meet their statutory and mandatory obligations.

Main duties of the job

The job holder is required to provide independent advice and assurance to the KCH and GSTT Boards on all matters relating to data protection & IG, patient records and underpinning legislation, ensuring executive and non-executive awareness of responsibilities and maintaining compliance with mandatory training / skills requirements.

Main duties include:

• Ensuring effective delivery of the annual IG service and business plan, the budget for pay and non-pay expenditure and the underpinning operational plan
• Ensuring that GSTT/KCH and data subjects are informed about their data protection rights, obligations and responsibilities
• Ensuring the review and amendment of records of processing to ensure legal compliance
• Overseeing complaints concerning information rights and data protection, as raised by the ICO, GSTT/KCH or other person(s)
• Acting as principal liaison between the Trusts and the ICO regarding investigations, complaint handling and inspections
• Advising on applicable data protection rules/regulations and laws
• Responsibility for IG staff performance and development

Financial and staff management responsibility, including:

• Annual business plan and budget for IG and patient records services, with a current operating budget of £7m pa as at 2023/24 staffing levels
• Leading the Trusts' Information Governance teams, setting strategy and monitoring performance
• Monitoring compliance within the directorate with Trust-wide staff management policies and procedures

About us

The successful applicant will work with an enthusiastic and dedicated team to provide strategic leadership within the Trusts to deliver an effective, integrated, responsive and flexible IG service. The post holder will support the Joint Director of Information Governance & Management in developing a strategic IG service model by contributing to service design, taking responsibility for areas of service improvement and developing a shared vision for the service.

In performing the tasks set out by law, the DPO must have significant and demonstrable experience. in particular:

• • Experience leading a privacy-by-design approach, strategically implementing and utilising Data Protection Risk Assessments (DPIAs)
  • Experience operating within a risk-first environment, understanding and utilising risks to drive change and innovation.
  • Data Protection Officer (or deputy) level experience within UK Healthcare.

Details Date posted

24 June 2025

Pay scheme

Agenda for change

Band

Band 8c

Salary

£82,462 to £93,773 a year per annum inc HCA

Contract

Permanent

Working pattern

Full-time

Reference number

196-SMT1732

Job locations

Guy's & St Thomas' NHS Foundation Trust

Westminster Bridge Road

London

SE1 7EH

Job description Job responsibilities

See attached job description for details of main responsibilities.

Key relationships of the job holder will span both KCH and GSTT NHS Foundation Trusts, and include the following:

Internal

Chief Executives

Senior Information Risk Owner / Chief Digital Information Officer

Senior Information Management / IG and Health Records Managers

Caldicott Guardians & Trust Legal / General Counsel

Clinical Directors and Managers

Directors of Quality & Assurance

Heads of Information Security & Major Programmes

Business, Finance and Project Managers

External

Information Commissioners Office

NHS England / Transformation

National Coordinating Centre (CRNCC) | NIHR

Kings College and AI Centre

DPOs across major programmes and research projects

Police, Solicitors and Courts

Health Innovation Network

Job description Job responsibilities

See attached job description for details of main responsibilities.

Key relationships of the job holder will span both KCH and GSTT NHS Foundation Trusts, and include the following:

Internal

Chief Executives

Senior Information Risk Owner / Chief Digital Information Officer

Senior Information Management / IG and Health Records Managers

Caldicott Guardians & Trust Legal / General Counsel

Clinical Directors and Managers

Directors of Quality & Assurance

Heads of Information Security & Major Programmes

Business, Finance and Project Managers

External

Information Commissioners Office

NHS England / Transformation

National Coordinating Centre (CRNCC) | NIHR

Kings College and AI Centre

DPOs across major programmes and research projects

Police, Solicitors and Courts

Health Innovation Network

Person Specification Qualifications, Education, Knowledge Essential

• Qualifications in Information Governance / Data Protection

Desirable

• Experience of working within an NHS Foundation Trust

Skills Essential

• Demonstrable success in delivering change and performance with and through management and clinical teams, by engaging them in the strategic direction and delivery plans, establishing clear work priorities and delegating effectively

Desirable

• Ability to collaborate constructively with internal and external partners to create the conditions for successful partnership working;

Setting direction Essential

• Highly developed leadership and influencing skills with the ability to enthuse, motivate and involve individuals and teams and have them understand the Trusts' performance expectations;

Desirable

• Sound political judgement, astuteness and sensitivity in understanding and working with complex policy, matters of confidentiality and diverse interest groups

Personal Qualities Essential

• High level of work organisation, selfmotivation, drive for performance and improvement and flexibility in approach and attitude;
• Excellent inter-personal and communications skills with a track record in writing complex business cases and X A/I policies;

Experience Essential

• Experience leading a privacy-by-design approach, strategically implementing and utilising Data Protection Risk Assessments (DPIAs)
• Experience operating within a risk-first environment, understanding and utilising risks to drive change and innovation.
• Data Protection Officer (or deputy) level experience within UK Healthcare

Person Specification Qualifications, Education, Knowledge Essential

• Qualifications in Information Governance / Data Protection

Desirable

• Experience of working within an NHS Foundation Trust

Skills Essential

• Demonstrable success in delivering change and performance with and through management and clinical teams, by engaging them in the strategic direction and delivery plans, establishing clear work priorities and delegating effectively

Desirable

• Ability to collaborate constructively with internal and external partners to create the conditions for successful partnership working;

Setting direction Essential

• Highly developed leadership and influencing skills with the ability to enthuse, motivate and involve individuals and teams and have them understand the Trusts' performance expectations;

Desirable

• Sound political judgement, astuteness and sensitivity in understanding and working with complex policy, matters of confidentiality and diverse interest groups

Personal Qualities Essential

• High level of work organisation, selfmotivation, drive for performance and improvement and flexibility in approach and attitude;
• Excellent inter-personal and communications skills with a track record in writing complex business cases and X A/I policies;

Experience Essential

• Experience leading a privacy-by-design approach, strategically implementing and utilising Data Protection Risk Assessments (DPIAs)
• Experience operating within a risk-first environment, understanding and utilising risks to drive change and innovation.
• Data Protection Officer (or deputy) level experience within UK Healthcare

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.

Certificate of Sponsorship

Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).

From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).

Additional information Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.

Certificate of Sponsorship

Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).

From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).

Employer details Employer name

Guy's and St Thomas' NHS Foundation Trust

Address

Guy's & St Thomas' NHS Foundation Trust

Westminster Bridge Road

London

SE1 7EH

Employer's website

https://www.guysandstthomas.nhs.uk/careers/careers.aspx (Opens in a new tab)

Employer details Employer name

Guy's and St Thomas' NHS Foundation Trust

Address

Guy's & St Thomas' NHS Foundation Trust

Westminster Bridge Road

London

SE1 7EH

Employer's website

https://www.guysandstthomas.nhs.uk/careers/careers.aspx (Opens in a new tab)