Information Security and Governance Manager

NHS Scotland; Glasgow; Hybrid; GBP 42,000 - 64,000; Full time

Benefits offered by this job

pension scheme

comprehensive work life balance poli c

occupational health services

learning resource centres

discounted leisure

financial

shopping benefits

Job summary

PSD Scotland, formed from NSS and NES, is seeking two Information Governance and Security specialists to join the Digital and Security Consultancy Team. You will assess systems for governance and security, advise on controls, and help prepare assurance documentation.

Role requires degree or equivalent experience, strong communication, and ability to influence senior stakeholders. Hybrid pattern; Edinburgh or Glasgow base; Disclosure Scotland checks apply.

Qualifications

• Educated to degree level or equivalent experience in information governance, data protection, records management or information security.
• Demonstrable knowledge of UK GDPR, Data Protection Act 2018 and related requirements.
• Experience assessing systems against legislation, policies and organisational requirements.

Responsibilities

• Assess new and existing systems, services and projects for information governance and security compliance.
• Provide specialist advice, assurance and guidance to large, complex initiatives.
• Identify risks, advise on controls, and support assurance documentation development and review.

Skills

UK GDPR

Data protection

Information security

Records management

Stakeholder management

Analytical skills

Written and verbal communication

Independent working

Multidisciplinary teamwork

Education

Degree level or equivalent experience

Job description

2 positions available, one permanent, one fixed term/secondment

This post is a 24-Month Fixed Term / Secondment position. As per the Fixed Term Contacts Policy – Where individuals with continuous service within the NHS apply for fixed-term contract roles, PSD Scotland reserves the right to refuse any such appointment.

On 1 April 2026, NHS National Services Scotland (NSS) and NHS Education for Scotland (NES) became one national organisation, focused on continuity today and a stronger, more connected service for tomorrow. As part of this transformation, NSS and NES have joined to form a new organisation: Public Services Delivery Scotland (PSD Scotland). This new organisation will play a pivotal role in supporting the renewal and ensuring the long-term sustainability of health and care services across Scotland.

About The Organisation

PSD Scotland unites expertise from NES and NSS in a way that will allow us to accelerate national programmes to support the NHS to deliver better care, now and in the future. We support staff with education and training, provide the tools and data that improve services, and run vital national functions such as procurement, logistics and blood, tissue and cell services.

The Post

We have an exciting opportunity for two individuals to join the Information Governance and Security Consultancy Team within Digital and Security. The Consultancy Teams assess new and existing systems, services and projects to determine compliance with information governance, data protection and information security legislation, standards and organisational requirements. As an integral member of the team, the Information Security and Governance Manager will provide specialist advice and assurance, support and guide large and complex projects, identify compliance risks and required controls, and oversee the completion of appropriate information governance and security documentation.

The Candidate

You should be educated to degree level or have equivalent relevant experience in information governance, data protection, records management, information security, information management or a related discipline. You will have demonstrable knowledge and practical understanding of the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and related data protection requirements. You will also have experience of assessing new or existing systems, services and projects against relevant legislation, standards, policies and organisational requirements, and of translating complex findings into clear, proportionate and practical advice. You should be confident in identifying and articulating information governance and security risks, recommending appropriate controls, and supporting the development and review of assurance documentation. Strong analytical, written and verbal communication skills are essential, together with the ability to build effective relationships, constructively challenge proposals and influence colleagues, project teams, senior stakeholders and suppliers. You should also be able to manage competing priorities, work independently, exercise sound professional judgement and contribute effectively within a multidisciplinary consultancy environment.

The successful candidate will be required to undergo a Disclosure Scotland check. Any candidate who have lived/worked overseas for more than 12 months in the preceding 5 years will also be required to provide a criminal record check from the appropriate overseas agency.

Location and Working Pattern

Gyle Square, Edinburgh or Delta House, Glasgow

Currently hybrid working

Work pattern: Monday to Friday, 36 hours per week

It is a condition of this employment that you must live and remain a resident within the UK and have entitlement to work in the UK for the post in which you will be employed.

PSD Scotland is a remote-friendly employer with colleagues based throughout Scotland. We support hybrid and office-based working arrangements where possible and welcome discussions about alternative working patterns during the application process.

Benefits

• pension scheme
• comprehensive range of work life balance policies
• occupational health services
• learning resource centres
• discounted leisure
• financial
• shopping benefits

HR Benefits Brochure.

Inclusion

Public Services Delivery Scotland is a national organisation and, as an anchor institution, is committed to creating a diverse and inclusive workplace where everyone feels valued and respected. We welcome applications from all under-represented groups, including racially minoritised people and disabled people. You do not need to be working in a similar role now. Whether you are returning from a career break, such as maternity, paternity or caring responsibilities, or bringing transferable skills from another sector, your experience can bring a valuable perspective to our work. We are committed to supporting staff health, wellbeing and development, and offer a range of learning and development opportunities to promote diversity, inclusion and positive mental health. Staff can also join a range of equality networks. As an equal opportunities employer and accredited Disability Confident Leader, we offer an interview to disabled applicants who meet the minimum criteria. Where exceptionally high application volumes make this impracticable, a fair and proportionate shortlisting approach will be applied in line with Disability Confident guidance.

If you would like to discuss the role, reasonable adjustments or alternative working patterns before applying, please contact [e-mail].

Further Information

For an informal discussion on the post, please contact Tiziano Donvito, IG and Security Consultancy Lead at PSD Scotland, [e-mail].

Closing date for completed applications

Tuesday 27th October 2026.

Please note that the majority of correspondence is sent by e-mail only, so please check your e-mail regularly (including junk folders).

We are an equal opportunities employer and as committed participant in the disability confident scheme, guarantees to interview all disabled applicants who meet the minimum criteria for our vacancies however, where exceptionally high application volumes make this impracticable, a fair and proportionate shortlisting approach will be applied in line with Disability Confident guidance.