The Information Governance Manager sits in the IG function at NHS Shropshire, Telford and Wrekin ICB, supporting the Head of IG and DPO. It shapes the ICB's IG framework, advises leaders and partners, assures compliance, and leads programmes for the ICB and GP practices. The consultancy remit includes the Data Security and Protection Toolkit, within the Cluster ICB's consistent hybrid model and designated offices. Applicants need a relevant degree or equivalent and extensive specialist IG knowledge gained through postgraduate study or equivalent experience or training.
What the job involves
- Shape and coordinate the ICB's information governance framework and strategy, aligned with its strategic commissioner role and statutory duties
- Provide specialist IG consultancy and support to the ICB and GP practices, in line with the ICB's support offer
- Support the DPO and act as their deputy on IG matters for the Board, executives, senior leaders and system partners
- Advise on IG risks, data flows, information sharing and data assurance, using legislative and regulatory analysis to recommend good practice
- Support compliance with UK GDPR, the Data Protection Act 2018, records management requirements, NHS codes of practice and national IG frameworks
- Oversee annual Data Security and Protection Toolkit completion and improvement planning for the ICB and aligned GP practices
- Lead IG programmes and projects, brokering the timely delivery of activities and initiatives
- Identify opportunities and develop strategic and tactical approaches to meet the ICB's and GP practices' IG needs
- Develop and maintain collaborative relationships with internal and external stakeholders
- Promote continual improvement and a positive culture of data protection and information stewardship
- Identify, assess and monitor IG risks, escalating them through corporate risk processes
- Provide assurance to the SIRO, Caldicott Guardian and Audit Committee
Qualifications
- Relevant degree or equivalent experience at a similar level in a specialist area
- Extensive IG knowledge gained through a postgraduate diploma or equivalent experience or training
- Evidence of post-qualifying and continuing professional development
Experience
- Practical data protection implementation, including DPIAs, data-sharing agreements, IG policies and procedures, and training development
Skills & knowledge
- Understanding of current healthcare policy, its aims and implications for engagement, and the relationship between the Department of Health and NHS England and provider or commissioning organisations
- Communication skills to deliver key messages to internal and external stakeholders, including senior people and those outside the NHS
- Presentation skills for complex concepts and informed persuasion to influence others
- Ability to identify risks, anticipate issues, develop solutions and resolve project or service delivery problems; interpret complex information quickly and decide when views differ or there is no obvious solution
- Direct line and job management skills, including delivering results through others and using different levers without direct line authority; ability to manage varied stakeholder relationships
- Knowledge of equality of opportunity and diversity, including how personal actions contribute to the equality agenda and responsibilities towards managed staff
Nice to have
- Membership of a recognised professional body, such as ADPO or the IG Society