Information Governance Compliance Officer

Provide Community; Colchester; On-site; GBP 35,000 - 55,000; Full time

Job summary

Join a forward-thinking community interest company dedicated to providing high-quality health and social care services. In this pivotal role within the Information Governance team, you will lead initiatives to ensure compliance with data protection laws and standards. Your expertise will guide the development and implementation of key policies, allowing the organization to uphold its commitment to safety and quality. With a focus on collaboration and community impact, this position offers a unique opportunity to contribute to transformative care solutions. If you are passionate about governance and compliance, this role is for you!

Benefits

NHS Pension

Employee-owned structure

Diversity and Inclusion initiatives

Qualifications

• Experience in Information Governance and Data Protection compliance.
• Strong understanding of UK GDPR and DPA2018 regulations.

Responsibilities

• Lead Data Protection audits and ensure compliance with IG Policies.
• Coordinate and document Information Governance projects effectively.

Skills

Data Protection Audits

Compliance Monitoring

Information Security Management

Training Delivery

Project Management (PRINCE2)

Education

Degree in Information Governance or related field

Relevant certifications (e.g., CIPP/E)

Tools

ISO27001 Standards

Cyber Essentials Framework

Job description

The post holder will be a key member of the Information Governance (IG) team, providing a comprehensive, high-quality, confidential service to Provide Group.

The post holder will perform a range of general and specialist duties related to Information Governance systems and processes, with a particular focus on Compliance.

The primary objective of this role is to lead specific Information Governance programmes, ensuring work is carried out effectively and professionally. The role includes developing and implementing Information Security, Confidentiality, and all key IG Policies and protocols across Provide CIC and Group companies, ensuring compliance across the organization.

Accurate project documentation and the coordination of time-critical work are essential responsibilities of this role.

Key Responsibilities:

1. Carrying out Data Protection audits to monitor and assess compliance against IG Policies and Procedures, National Standards, Contractual clauses, and relevant Data Protection Laws.
2. Maintaining the organisation’s Information Asset Register (IAR) and Records of Processing Activities (ROPA) to ensure compliance with UK GDPR and DPA2018.
3. Liaising with IT and Cyber Security teams and other stakeholders to manage Information Security risks and ensure compliance with standards such as ISO27001, Cyber Essentials, and the National Data Guardian Standards.
4. Providing training on new IG systems and processes.
5. Supporting the processing of Information Sharing Agreements.
6. Assisting with completing Data Protection Impact Assessments (DPIA).
7. Recording all work in line with organisational procedures, ensuring requests are appropriately approved and authorized through change control processes.
8. Providing administrative support for programmes and projects, working according to PRINCE2 Project Management standards.
9. Supporting evidence collection for the DSP Toolkit, ensuring it is cohesive, self-explanatory, and relevant to the financial year assessment.
10. Supporting the development, implementation, monitoring, and maintenance of IG Policies and procedures to ensure compliance with Data Protection Act 2018, Access to Health Records Act, and other relevant legislation.

Provide is a Community Interest Company (social enterprise) delivering a broad range of health and social care services in the community, committed to safety, responsiveness, and high quality. Owned by its employees, profits are reinvested into the community or services.

We operate from various community settings, including hospitals, clinics, schools, nursing homes, primary care, and homes, offering over 40 services across Essex, Dorset, East Anglia, and North England.

As a highly respected, award-winning health and social care provider, we expect our staff to uphold our values:

• Vision: Transforming Lives
• Values: Care, Innovation, and Compassion
• Mission: An ambitious, employee-owned social enterprise growing in influence, transforming lives through care, treatment, and education.

We are an equal opportunity employer committed to diversity, with active LGBT+ and Ethnic Minority Networks. We welcome applicants from underrepresented groups. If you have the skills and experience, please apply regardless of background.

Eligible for NHS Pension

For further details or informal visits, contact:

Name: Petra Lastivkova
Job Title: Information Governance Manager
Email: [e-mail]
Telephone: [phone]