Information Governance Manager

InHealth Group; Remote; GBP 60,000 - 80,000; Full time

Job summary

A leading healthcare organization in the UK is seeking an experienced Information Governance Manager to drive governance strategy and compliance across a complex, multisite operation. This full-time permanent role involves overseeing information governance, cyber security, and quality management. Applicants should have governance experience in healthcare, strong analytical capabilities, and a full UK driving license due to travel requirements. This role offers the opportunity to influence strategy and operational excellence in healthcare delivery.

Qualifications

• Experience in governance or compliance in healthcare.
• Strong leadership skills across technical and clinical teams.
• Understanding of IG legislation and ISO standards.

Responsibilities

• Lead IG and Cyber Security strategy for compliance.
• Oversee audits and manage governance risks.
• Implement Cyber Security policies and lead ISO recertification.

Skills

Governance experience

Analytical capability

Budget management

Leadership

Risk management

Attention to detail

Tools

Microsoft platforms

Governance tooling

Job description

Were looking for an experienced Information Governance Manager to lead IG, Cyber Security, Digital Clinical Safety, and Quality Management across a complex, multisite healthcare organisation. This is a key leadership role driving strategy, compliance, change, and operational excellence.As our Information Governance Manager, you will shape and deliver our governance strategy, deputise for the Group Head, and ensure compliance with UK, NHS, and international standards. You will lead transformational improvement across IG, Cyber, Digital Clinical Safety and ISOaligned Quality Management, working closely with senior leaders, technical teams, and clinical stakeholders.This is a full-time permanent role, working remotely. There will be travel to InHealth sites as part of the role.

Main duties of the job

Information GovernanceLead IG strategy aligned to UK, NHS and Philippines frameworks.Oversee policies, DPIAs, Data Processing & Sharing Agreements.Lead the DSP Toolkit return and audit activity.Monitor conformance and drive corrective actions.Cyber SecurityImplement Cyber Security policies under the SIRO.Lead ISO 27001 recertification, internal audits, and remediation.Work with infrastructure/product teams on data security and incident handling.Oversee playbooks and ensure measurable risk reduction.Digital Clinical SafetyCollaborate with IT, Clinical, Legal, HR, SIRO, and Caldicott Guardian.Maintain the Digital Clinical Safety Policy with CMO/CTO.Lead biennial reviews for DCB0129/0160 and MDD compliance.Oversee training compliance and safety case documentation.Quality ManagementLead the ISO 9001aligned Quality Management System.Manage ISO 9001 audits, internal programmes, and recertification.Maintain organisationwide regulatory conformance mapping.CrossDomain GovernanceRun IG & Cyber Security Committee operations and reporting.Manage governance risks, actions, and training records.Ensure documentation, logs and artefacts are auditready.

About us

InHealth is the UKs largest specialist provider of diagnostic and healthcare solutions. Our aim is to make healthcare better for patients by working collaboratively with the NHS to deliver a range of high-quality tests, scans, assessments and procedures. In the last year, we have supported more than 5 million people in their healthcare journeys, the majority of these are NHS patients and service users.

As a people-focused organisation, our teams are integral in how we deliver our services and our values of Trust, Passion, Care and Fresh Thinking underpin everything we do, influencing the way we interact with patients, customers, and colleagues.

Our mission is to provide high-quality services within local communities to over 7 million patients by 2030. We are committed to ensuring that patients receive a positive experience, maintaining a 97% patient satisfaction rate.

Job responsibilities

Were looking for an experienced Information Governance Manager to lead IG, Cyber Security, Digital Clinical Safety, and Quality Management across a complex, multisite healthcare organisation. This is a key leadership role driving strategy, compliance, change, and operational excellence.

As our Information Governance Manager, you will shape and deliver our governance strategy, deputise for the Group Head, and ensure compliance with UK, NHS, and international standards. You will lead transformational improvement across IG, Cyber, Digital Clinical Safety and ISOaligned Quality Management, working closely with senior leaders, technical teams, and clinical stakeholders.

This is a full-time permanent role, working remotely. There will be travel to InHealth sites as part of the role.

What You Will Do

Information Governance

• Lead IG strategy aligned to UK, NHS and Philippines frameworks.
• Oversee policies, DPIAs, Data Processing & Sharing Agreements.
• Lead the DSP Toolkit return and audit activity.
• Monitor conformance and drive corrective actions.

Cyber Security

• Implement Cyber Security policies under the SIRO.
• Lead ISO 27001 recertification, internal audits, and remediation.
• Work with infrastructure/product teams on data security and incident handling.
• Oversee playbooks and ensure measurable risk reduction.

Digital Clinical Safety

• Collaborate with IT, Clinical, Legal, HR, SIRO, and Caldicott Guardian.
• Maintain the Digital Clinical Safety Policy with CMO/CTO.
• Lead biennial reviews for DCB0129/0160 and MDD compliance.
• Oversee training compliance and safety case documentation.

Quality Management

• Lead the ISO 9001aligned Quality Management System.
• Manage ISO 9001 audits, internal programmes, and recertification.
• Maintain organisationwide regulatory conformance mapping.

CrossDomain Governance

• Run IG & Cyber Security Committee operations and reporting.
• Manage governance risks, actions, and training records.
• Ensure documentation, logs and artefacts are auditready.

About You

Youre a trusted, calm, and influential leader who communicates clearly, brings people together, and drives continuous improvement. You challenge outdated processes, lead change confidently, make sound decisions under pressure, and build strong relationships across clinical, technical and corporate teams.

You can translate complex data into clear plans, write concise strategic updates, mentor your team, negotiate effectively with stakeholders, and maintain exceptional attention to detail.

A full UK driving licence and access to transport are required due to travel expectations.

Experience Required

• Governance, risk, or compliance experience in healthcare or a regulated sector.
• Ability to set strategic vision and align departmental goals.
• Strong analytical capability and datadriven decisionmaking.
• Deep understanding of IG legislation, ISO standards, cyber frameworks & NHS digital safety protocols.
• Budget ownership and monitoring experience.
• Leadership across multidisciplinary technical and clinical teams.
• Strong resource planning and prioritisation skills.
• High proficiency with Microsoft platforms and governance tooling.
• Experience working with SIRO, IAOs, DPO, Caldicott Guardian, operations, shared services and certification bodies.
• Procurement, vendor management and contract negotiation experience.
• Multisite or international healthcare experience.
• Experience with audits, regulatory inspections, and digital clinical safety standards (DCB0129/0160, MDD).
• Incident response and thirdparty risk management.

Person Specification

Qualifications

• Please see Job Description
• Please see Job Description

Experience

• Please see Job Description
• Please see Job Description

Additional Criteria

• Please see Job Description
• Please see Job Description

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.