Information Security and Governance Manager

NHS National Services Scotland; City of Edinburgh, Glasgow; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Pension scheme

Work-life balance policies

Occupational health services

Learning resources

Discounted leisure and shopping

Job summary

Public Services Delivery Scotland (PSD Scotland) is seeking an Information Governance and Security Manager to join the Digital and Security Consultancy Team. You will assess systems for IG, data protection and information security compliance and provide expert assurance across major projects.

Key duties include advising on controls, translating findings into practical guidance and supporting governance documentation while balancing competing priorities in a hybrid working environment across

Qualifications

• Degree or equivalent experience in information governance, data protection, records management, information security or related discipline.
• Strong knowledge of UK GDPR, Data Protection Act 2018 and related requirements.
• Ability to translate complex findings into clear, practical advice.

Responsibilities

• Assess new or existing systems against relevant legislation, standards and organisational requirements.
• Provide specialist advice and assurance on information governance and security.
• Support and guide large and complex projects, identify risks and controls, and oversee assurance documentation.

Skills

Analytical skills

Written communication

Verbal communication

Stakeholder engagement

Education

Degree in information governance/data protection/records management/information security

Job description

This post is a 24-Month Fixed Term / Secondment position. As per the Fixed Term Contacts Policy - Where individuals with continuous service within the NHS apply for fixed-term contract roles, PSD Scotland reserves the right to refuse any such appointment.

On 1 April 2026, NHS National Services Scotland (NSS) and NHS Education for Scotland (NES) became one national organisation, focused on continuity today and a stronger, more connected service for tomorrow.

As part of this transformation, NSS and NES have joined to form a new organisation: Public Services Delivery Scotland (PSD Scotland). This new organisation will play a pivotal role in supporting the renewal and ensuring the long-term sustainability of health and care services across Scotland.

About the Organisation:

PSD Scotland unites expertise from NES and NSS in a way that will allow us to accelerate national programmes to support the NHS to deliver better care, now and in the future.

We support staff with education and training, provide the tools and data that improve services, and run vital national functions such as procurement, logistics and blood, tissue and cell services.

The Post:

We have an exciting opportunity for two individuals to join the Information Governance and Security Consultancy Team within Digital and Security. The Consultancy Teams assess new and existing systems, services and projects to determine compliance with information governance, data protection and information security legislation, standards and organisational requirements. As an integral member of the team, the Information Security and Governance Manager will provide specialist advice and assurance, support and guide large and complex projects, identify compliance risks and required controls, and oversee the completion of appropriate information governance and security documentation.

The Candidate:

You should be educated to degree level or have equivalent relevant experience in information governance, data protection, records management, information security, information management or a related discipline. You will have demonstrable knowledge and practical understanding of the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and related data protection requirements. You will also have experience of assessing new or existing systems, services and projects against relevant legislation, standards, policies and organisational requirements, and of translating complex findings into clear, proportionate and practical advice. You should be confident in identifying and articulating information governance and security risks, recommending appropriate controls, and supporting the development and review of assurance documentation. Strong analytical, written and verbal communication skills are essential, together with the ability to build effective relationships, constructively challenge proposals and influence colleagues, project teams, senior stakeholders and suppliers. You should also be able to manage competing priorities, work independently, exercise sound professional judgement and contribute effectively within a multidisciplinary consultancy environment.

The successful candidate will be required to undergo a Disclosure Scotland check. Any candidate who have lived/worked overseas for more than 12 months in the preceding 5 years will also be required to provide a criminal record check from the appropriate overseas agency.

Location and Working Pattern:

Gyle Square, Edinburgh or Delta House, Glasgow

Currently hybrid working

Work pattern: Monday to Friday/Sunday, 36 hours per week

It is a condition of this employment that you must live and remain a resident within the UK and have entitlement to work in the UK for the post in which you will be employed.

PSD Scotland is a remote-friendly employer with colleagues based throughout Scotland. We support hybrid and office-based working arrangements where possible and welcome discussions about alternative working patterns during the application process.

It is a condition of this employment that you must live and remain a resident within the UK and have entitlement to work in the UK for the post in which you will be employed.

Benefits:

Ourbenefits package includes pension scheme, comprehensive range of work life balance policies, occupational health services, learning resource centres and discounted leisure, financial and shopping benefits. HR Benefits Brochure.

Inclusion:

Public Services Delivery Scotland is a national organisation and, as an anchor institution, is committed to creating a diverse and inclusive workplace where everyone feels valued and respected. We welcome applications from all under-represented groups, including racially minoritised people and disabled people. You do not need to be working in a similar role now. Whether you are returning from a career break, such as maternity, paternity or caring responsibilities, or bringing transferable skills from another sector, your experience can bring a valuable perspective to our work. We are committed to supporting staff health, wellbeing and development, and offer a range of learning and development opportunities to promote diversity, inclusion and positive mental health. Staff can also join a range of equality networks. As an equal opportunities employer and accredited Disability Confident Leader, we offer an interview to disabled applicants who meet the minimum criteria. Where exceptionally high application volumes make this impracticable, a fair and proportionate shortlisting approach will be applied in line with Disability Confident guidance. If you would like to discuss the role, reasonable adjustments or alternative working patterns before applying, please contact [e-mail].

Further information:

For an informal discussion on the post, please contact Tiziano Donvito, IG and Security Consultancy Lead at PSD Scotland, [e-mail]

Closing date for completed applications is Tuesday 27th October 2026.

Pleasenote that the majority of correspondence is sent by e-mail only, so please check your e-mail regularly (including junk folders).

We are an equal opportunities employer and as committed participant in the disability confident scheme, guarantees to interview all disabled applicants who meet the minimum criteria for our vacancies however, where exceptionally high application volumes make this impracticable, a fair and proportionate shortlisting approach will be applied in line with Disability Confident guidance.