Information Governance Assurance Manager

Northumbria Healthcare NHS Foundation Trust; Norwich; On-site; GBP 40,000 - 70,000; Full time

Job summary

Join a forward-thinking NHS trust at an exciting time of digital transformation. As a specialist in Information Governance, you will lead compliance efforts and ensure the Trust meets national standards. This role offers a unique opportunity to impact patient care through effective data management and governance practices. Collaborate with a diverse team in a supportive environment that values innovation and professional growth. Benefit from flexible working hours, excellent pension schemes, and a range of NHS perks while contributing to a vital healthcare mission.

Benefits

Flexible working hours

Fast Track Staff Physiotherapy Service

Discounted gym memberships

Excellent pension scheme

Wagestream - access to pay

Free Park & Ride service

Free 24-hour counselling support

On-site Nursery

Career development support

Salary Sacrifice schemes

Qualifications

• Expertise in Information Governance and data protection standards.
• Ability to lead compliance monitoring and incident investigations.

Responsibilities

• Lead development of compliance mechanisms for IG standards.
• Manage employee subject access requests under data protection laws.

Skills

Information Governance

Data Protection Laws

Compliance Monitoring

Incident Investigation

Communication Skills

Education

Degree in Information Governance or related field

Relevant certifications (e.g., GDPR)

Tools

Data Security and Protection Toolkit (DSPT)

Job description

A Vacancy at Norfolk and Norwich University Hospitals NHS Foundation Trust.

Digital Health provides an expert information technology and telecommunications service covering all aspects of information processing to support operational and performance management and service improvement. The Department provides the Trust with a coherent digital strategy and secure, robust, reliable responsive, cost effective and customer driven digital services and systems. It also identifies opportunities for streamlining business processes and to enable data sharing and collaboration, both internally and externally, by the use or replacement of technology. In addition, it provides tools to enable business units to achieve their goals, facilitating a first-class quality of care to patients.

Now is a really exciting time to join the Norfolk & Norwich University Hospital, as we and the other two acute hospitals in Norfolk and Waveney we are working on our biggest digital programme to date: introducing an Electronic Patient Record (EPR) system. This programme is a key enabler of our transformation strategies for Acute Clinical Services across all sites. This is not simply a digital programme; this is one of the biggest pieces of clinical and operational transformation in the Norfolk and Waveney, set across 3 acute trusts. You will play a part in bringing the EPR to life and beyond, as we learn together about how to use it to its full advantage over the years to come in a safe and secure manner.

Act as a specialist on Information Governance (IG) for the Trust to provide an expert specialist advice service, in accordance with frameworks, national & local IG standards, requirements and best practice.

Lead the development and implementation of mechanisms to monitor compliance against national IG standards and the requirements of UK Data Protection laws and other external performance assessments.

Lead regular assessment against the Data Security and Protection Toolkit (DSPT), and other relevant standards. Report on Trust performance against these standards. Create plans to address risks and implement to improve the Trusts DSPT score and reduce the risks that the Trust faces through IG issues.

Investigate serious Incidents/breaches of IG and, when required produce formal reports of findings on reported adverse IG incidents, ensuring that lessons are learnt throughout the organisation, and that the recommendations are audited to ensure continued compliance.

Day to day line management responsibilities for the IG team.

Responsible for ensuring appropriate information sharing agreements and research projects, comply with data protection laws and are established with partner organisations and third parties.

Manage employee subject access requests (SARs) under data protection laws which involve Trust emails. This includes identifying what information can be disclosed and providing advice to HR in relation to an applicants personal information held in employment files.

Join us at the Norfolk and Norwich University Hospital and be part of a workforce of over 10,000 staff!

The NNUH is one of the largest NHS trusts in the UK, providing first-class acute care for around one million people, living in Norfolk and surrounding areas. We are a teaching and research hospital, at the forefront of innovation, home to state-of-the-art facilities, such as the Quadram Institute. We are pleased to work closely with the University of East Anglia, providing teaching opportunities for our staff and placement opportunities for their students. We attract some of the best and leading professionals from across the country and are proud that our workforce represents 94 countries from across the world.

We are a friendly, collaborative hospital, working with local services and home to N&N Hospitals Charity

We can offer you the full range of NHS benefits/discounts and in addition:

Flexible working hours

Fast Track Staff Physiotherapy Service

Multi Faith prayer room

Discounted gym memberships

Excellent pension scheme and annual leave entitlement

Wagestream - access up to 40% of your pay as you earn it

Free Park & Ride service direct to NNUH site

Free 24-hours confidential counselling support

On-site Nursery

On-site cafes offering staff discounts

Support in career development

Flexible staff bank

Salary Sacrifice schemes including lease cars, Cycle to Work scheme and home electronics

The following skills and experience will be required and are essential for the successful candidates:

To act as a designated specialist on Information Governance for the Trust to provide an expert specialist advice service, in accordance with regulatory and legislative framework, national and local information governance standards, requirements and best practice.

Permitted the freedom to achieve stated objectives in own way, without reference to line manager.

Lead in the development and implementation of mechanisms to monitor compliance against national IG standards and the requirements of UK Data Protection laws and other external performance assessments..

Ensure that external suppliers, contracted staff and end users are aware of the Information Governance standards and policies in place.

Has good understanding and the aptitude to remain up to date with information governance developments. Possesses an in-depth understanding of the information governance framework and standards used by the Trust. Is effective and persuasive in both written and oral communication.

To be a member of the Trusts Caldicott and Information Governance Assurance Committee and provide expertise and support for the data protection and confidentiality improvement plans identified through the Data Security and Protection Toolkit (DSPT). To provide this support by making an expert assessment of current data protection and confidentiality and proposing mitigation measures to improve information governance.

Lead regular assessment and accreditation of the Trust against information governance baselines contained within the Data Security and Protection Toolkit (DSPT), national Information Governance Assurance Frameworks and other relevant standards. Report to the Head of Information Governance on Trust performance against these standards.

Please refer to the Job Description for the full specification of responsibilities and requirements for this post.

This advert closes on Friday 16 May 2025