Information Governance Officer

NHS Dorset; Dorchester; Hybrid; GBP 35,000 - 48,000; Full time

Job summary

NHS Dorset Integrated Care Board is seeking an Information Governance Officer to support statutory, regulatory and organisational IG duties. The role covers data protection, information security and records management to enable high-quality care and commissioning across the health system.

You will work with ICB and system partners to promote accountability and effective information governance, with flexible locations including ICB offices and home-based work.

Qualifications

• Knowledge of data protection legislation (UK GDPR, DPA 2018).
• Experience with FoI and SAR processing and responses.
• Familiarity with NHS Records Management Code of Practice and DSP Toolkit.

Responsibilities

• Provide guidance on information governance, data protection and records management to staff.
• Manage information rights requests including SARs and FOI requests.
• Investigate and report information governance incidents and data breaches.

Skills

Information governance

Data protection

FOI requests

SAR handling

Records management

DPIAs

Education

Degree-level education

Data protection qualification

Tools

Redacting software

Job description

Job summary

An exciting opportunity has arisen to join the InformationGovernance Team within the Integrated Care Board (ICB) as an InformationGovernance Officer. This role will support the ICB in meeting its statutory,regulatory and organisational responsibilities for information governance,ensuring that information is managed securely, lawfully and effectively tosupport the delivery of high-quality healthcare and commissioning servicesacross the health and care system.The post holder will play a key role in supporting compliance with dataprotection legislation, the UK GDPR, Data Protection Act 2018, Freedom ofInformation legislation, records management standards, information securityrequirements and wider NHS information governance obligations.Working with colleagues across the ICB and system partners, the InformationGovernance Officer will provide advice, guidance and practical support on arange of information governance matters.The successful candidate will help promote a culture of accountability and goodinformation governance, supporting the safe and effective use of information to improve health outcomes, reduce inequalities and enable integrated workingacross the ICB geography.

Main duties of the job

• Provide advice and guidance to ICB staff on informationgovernance, data protection, confidentiality, records management andinformation security requirements.
• Support the management of information rights requests,including Subject Access Requests (SARs), Freedom of Information (FOI) requestsand other disclosures of information.
• Assist with the investigation, management and reporting ofinformation governance incidents, data breaches and near misses, ensuringlessons learned and improvement actions are implemented.
• Support compliance with the NHS Data Security and ProtectionToolkit (DSPT) and other relevant assurance and regulatory frameworks.
• Contribute to the development, review and implementation ofinformation governance policies, procedures and guidance.
• Undertake audits, monitoring activities and compliancereviews to assess adherence to information governance requirements and identifyareas for improvement.
• Support the completion and maintenance of records ofprocessing activities, information asset registers and other governancedocumentation.
• Assist with Data Protection Impact Assessments (DPIAs), DataSharing Agreements (DSAs) and the review of information sharing arrangements.
• Maintain accurate records and produce reports, performanceinformation and management information as required.
• Keep abreast of changes in legislation, NHS guidance andbest practice, supporting the organisation to respond to emerging informationgovernance requirements.

We work in a flexible and inclusive way to best support ourcolleagues, communities and partners. This means your role may involve a mix ofworking from different locations, including ICB offices, partner organisations,and community settings, as well as working from home. Some aspects of your rolewill require you to work in placemeeting face to face with colleagues,patients, partners and providersto build relationships, understand local needsand support the delivery of high-quality care. At other times, you will be ableto work more flexibly, including remotely, depending on the needs of the roleand the work being carried out. We aim to support a healthy worklife balancewhile ensuring we remain visible, connected and responsive to the communitieswe serve. You will be expected to work with your manager and team to agree aworking pattern that supports both service delivery and your wellbeing.

About us

Under the Model ICB Blueprint and the 10 Year Health Plan,ICBs will adopt a morestrategic commissioning role, focusing on population needs, reducinginequalities, anddelivering the three shifts as defined in the 10 year health plan, all whileoperating within strict financial limits.

The new organisation will operate on a larger scale with arevised vision and purpose,managing a commissioning budget of around £8 billion. Our role as astrategiccommissioner is to transform our local NHS through exceptional commissioningand build an innovative health system fit for the 21st century that truly meetsour communities needs. Informed by high quality data and insights, we willradically re-imagine how we operate, making sure that every pound in oursystem delivers the best possible value for everyone we serve.

We will encourage and support our people to grow and developnew skills and embrace new agile ways of working. Everyone is encouragedto contribute ideas, seek feedback, and take part in creating a listeningand learning culture where insight leads to improvement.

We will work as a team of teams, collaborating acrossservices and professions to deliver the best outcomes for our communities.You will be encouraged, and expected to model inclusive behaviours,valuing diverse perspectives and helping to create a workplacewhere everyone feels respected, supported, and able to thrive.

Job description

Job responsibilities

Please also refer to the attached detailed JobDescription.

• Provide advice and guidance to ICB staff on informationgovernance, data protection, confidentiality, records management andinformation security requirements.
• Support the management of information rights requests,including Subject Access Requests (SARs), Freedom of Information (FOI) requestsand other disclosures of information.
• Assist with the investigation, management and reporting ofinformation governance incidents, data breaches and near misses, ensuringlessons learned and improvement actions are implemented.
• Support compliance with the NHS Data Security and ProtectionToolkit (DSPT) and other relevant assurance and regulatory frameworks.
• Contribute to the development, review and implementation ofinformation governance policies, procedures and guidance.
• Undertake audits, monitoring activities and compliancereviews to assess adherence to information governance requirements and identifyareas for improvement.
• Support the completion and maintenance of records ofprocessing activities, information asset registers and other governancedocumentation.
• Assist with Data Protection Impact Assessments (DPIAs), DataSharing Agreements (DSAs) and the review of information sharing arrangements.
• Maintain accurate records and produce reports, performanceinformation and management information as required.
• Keep abreast of changes in legislation, NHS guidance andbest practice, supporting the organisation to respond to emerging informationgovernance requirements.

We work in a flexible and inclusive way to best support ourcolleagues, communities and partners. This means your role may involve a mix ofworking from different locations, including ICB offices, partner organisations,and community settings, as well as working from home. Some aspects of your rolewill require you to work in placemeeting face to face with colleagues,patients, partners and providersto build relationships, understand local needsand support the delivery of high-quality care. At other times, you will be ableto work more flexibly, including remotely, depending on the needs of the roleand the work being carried out. We aim to support a healthy worklife balancewhile ensuring we remain visible, connected and responsive to the communitieswe serve. You will be expected to work with your manager and team to agree aworking pattern that supports both service delivery and your wellbeing.

Person Specification

Experience

Essential

• Please also see attached Person Specification.
• Has previously worked in a similar information governance and / or records management position within the public sector.
• Good working knowledge and understanding of the FoI Act and of data protection legislation, and track record / experience of applying these for the purposes of processing FoI and SAR requests and responses.
• Good working knowledge of the NHS Records Management Code of Practice, track record / experience of applying the Code to records management.
• Experience of IG policy development and implementation, experience of supporting an organisations compliance with data protection legislation and FoIA.
• Demonstrable appreciation and respect for the confidentiality of personal identifiable data.
• Demonstrable experience of technology-assisted document checking, editing, and redacting to comply with statutory requirements for SARs.
• Meticulous attention to detail while processing large quantities of written information in various formats.
• Appreciation and respect for the highly sensitive nature of information and data that is handled on a regular basis.
• Skills for communication on complex information and administrative matters, requiring developed interpersonal and oral/ written communication skills.
• Good communication on complex/ technical information, requiring developed interpersonal and oral/ written communication skills.
• Ability to pull together data and information into comprehensive draft reports.
• Negotiating, networking and persuasive skills.
• Problem solving skills and ability to respond to sudden unexpected demands.
• Excellent time management skills, with the ability to re- prioritise.
• Can discern when issues require escalation, and acts on this in a timely manner.
• Competent planner, organises and coordinates work per standard operating procedure and statutory timeframes.
• Skills for managing aspects of projects ensuring they meet statutory / regulatory targets.
• Well-developed skills for manipulating and editing information.
• Advanced keyboard skills, use of a range of software, in particular redacting software.
• Ability to work on own initiative and organise own workload with minimal supervision working to tight and often changing timescales.
• Good understanding of administrative procedures, project management and information analysis.

Qualifications

Essential

• Please also see attached Person Specification.
• Educated to degree level in relevant subject, or equivalent level of experience of working at a similar level in information governance / records management.
• Data protection qualification.
• Evidence of continuous training and development in data protection, IG, FoIA, records management

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.

Employer details

Employer name

NHS Dorset

Address

NHS Dorset Integrated Care Board NHS Dorset - County Hall Colliton Park Dorchester Dorset DT1 1XJ United Kingdom

Employer's website