Head of Risk & Information Governance (DPO for ICB & PC)

NHS Hertfordshire and West Essex Integrated Care Board; Welwyn Garden City; On-site; GBP 74,000 - 86,000; Full time

Job summary

An established industry player is seeking a Head of Risk & Information Governance to oversee the governance of the Integrated Care Board. This pivotal role requires an individual with extensive expertise in information governance and risk management, ensuring compliance with legal and regulatory obligations. The successful candidate will lead the Information Governance team, act as Data Protection Officer, and implement strategies to manage risks effectively. Join a forward-thinking organization committed to a positive work-life balance and flexible working patterns, making a significant impact in healthcare governance.

Benefits

Flexible working patterns

Commitment to work-life balance

Qualifications

• Expertise in information governance and risk management in complex environments.
• Experience as Data Protection Officer with relevant accreditation.

Responsibilities

• Ensure robust information governance framework for the ICB.
• Lead the Information Governance team and manage daily operations.

Skills

Information Governance

Data Protection

Risk Management

Analytical Skills

Communication Skills

Education

Postgraduate Diploma

Master's Level Equivalent

Tools

CIPP/E Accreditation

Job description

Employer: NHS Hertfordshire and West Essex Integrated Care Board

Employer type: NHS

Site: Charter House

Town: Welwyn Garden City

Salary: £74,290 - £85,601 per annum plus fringe allowance

Salary period: Yearly

Closing: 28/01/2025 23:59

Head of Risk & Information Governance (DPO for ICB & PC)

NHS AfC: Band 8c

Job overview

The Head of Information Governance and Risk is a significant and central role in delivering the Governance of the Integrated Care Board. The post holder will be an expert and have in-depth specialised knowledge in information governance with its crossover between written and digital compliance – as Data Protection Officer for the ICB and Primary Care. They will also have experience of leading risk management in complex environments.

Working for NHS Hertfordshire and West Essex Integrated Care System, they will ensure that the ICB meets its legal and regulatory obligations in relation to Information Governance including confidentiality, information security, Data Protection, Freedom of Information, GDPR and Registration Authority requirements.

Main duties of the job

• The post holder will ensure that there is a robust information governance framework in place and being adhered to, to support the functions of the ICB.
• The post holder will be required to provide day-to-day management of the Information Governance team, providing both routine and ad-hoc information and intelligence within the ICB and to external bodies.
• The post holder will act as Data Protection Officer for the ICB and Primary Care GP practices operating within the ICB's geographical remit, having current relevant accreditation to support this role that includes CIPP/E.
• The post holder will be responsible for the design and implementation of a risk approach for the Integrated Care Board which effectively identifies and mitigates both tactical and strategic risk across the organisation.
• The post holder will lead on all national reporting to NHS England and other regulatory bodies and ensure it is completed with accuracy and within set timeframes.
• The post holder will be responsible for coordinating the organisations processes for Subject Access Requests, or applications under the Freedom of Information Act.
• The post holder will be responsible for and oversee records management for the ICB.
• The post holder will be responsible for direct line management within their team.
• The post holder will be required to combine advanced knowledge and experience of the commissioning, information and performance management requirements within the NHS with excellent technical, analytical and communication skills.
• The post holder will have experience working across organisational boundaries, liaising with senior managerial and clinical staff.
• The post holder will be expected to act with a significant level of autonomy in planning and organising their team’s routine workload and project work.
• The job description and person specification may be reviewed on an ongoing basis in accordance with the changing needs of the Department or Directorate and the ICB.

Person specification

Knowledge, Training and Experience

• Extensive and significant expertise and knowledge of specialist areas, acquired through postgraduate diploma or equivalent experience or training plus further specialist knowledge or experience to master’s level equivalent.
• Previous experience of holding the role and related responsibilities of Data Protection Officer for a comparable organisation.
• Evidence of post-qualifying and continuing professional development – including CIPP/E accreditation.
• Able to demonstrate an in-depth understanding of the background to and aims of current healthcare policy.

Communication Skills

• Excellent written and verbal communication skills, with the ability to articulate specialist and technical knowledge to a range of audiences.

Analytical

• Ability to analyse complex facts and situations and develop a range of credible options that can be easily interpreted and understood by stakeholders.

We understand that finding and starting a new job is an important life decision. If you need reasonable adjustments for a disability, health issue or a life event, please let us know so that we can consider your application fairly.

We are committed to a positive work-life balance for our employees. Employees are entitled to seek to work flexible working patterns and we are committed to listen and consider all requests.

Unfortunately, we are unable to offer certificates of sponsorship, so you'll need to be able to demonstrate your right to work in the UK during the recruitment process.

Employer certification / accreditation badges