Information Governance/ Security Analyst

max20 ltd; United Kingdom; On-site; GBP 40,000 - 60,000; Full time

Job summary

A healthcare consultancy in the United Kingdom is seeking an Information Governance/Security Analyst to support their NHS customers in improving data governance and security practices. You will be responsible for reviewing contracts and supplier systems as well as formalizing essential functions. Ideal candidates will have relevant experience in the healthcare sector and strong analytical skills.

Qualifications

• Experience in information governance and security within healthcare settings.
• Familiarity with cybersecurity and data protection regulations.
• Strong analytical and documentation skills.

Responsibilities

• Review Trust-wide populated BCPs for systems and interdependencies.
• Formalise the Trust Essential Functions Register.
• Complete supplier discovery and data processor mapping.

Job description

Overview

We are looking for an Information Governance/Security Analyst to support one of our NHS customers in the North West.

Responsibilities

• Establishment – Review Trust-wide populated BCPs to identify systems, suppliers, their function, criticality, and interdependencies.
• Formalise the Trust Essential Functions Register, populating the NHSE DSPT Essential Function Template with supporting policies and procedures.
• Supplier & Subcontractor Assurance – Complete supplier discovery and data processor mapping for critical business functions.
• Complete divisional discovery work to identify gaps in suppliers and data processors.
• Populate identified gaps into the central Data Agreement Register.
• Review contracts for:
  • Cybersecurity clauses
  • Right to audit
  • Data protection clauses
  • Incident breach notification requirements
  • Details of sub-processors
• Review contracts for technical and security risks.
• Document supplier certifications and ensure records are in date.