Information Security Manager

MERJE; Maidstone; On-site; GBP 40,000 - 60,000; Full time

Job summary

MERJE is seeking an experienced Information Governance Manager in Kent for a 6-month FTC. You will report to the Group Data Protection Officer and drive compliance with data protection legislation, strengthening the information governance framework, and promoting a positive data protection culture.

You will oversee a data protection modernisation programme, including RoPA transfer to OneTrust, DPIAs and LIAs, and provide guidance across stakeholders while ensuring regulatory compliance.

Qualifications

• IG experience in healthcare essential.
• Knowledge of NHS IG and Caldicott principles desirable.
• Understand GDPR, ISO 27001 and PCI DSS requirements.

Responsibilities

• Lead modernisation of RoPA on OneTrust.
• Develop DPIA and LIA processes and advise on mitigations.
• Draft and update information governance procedures.
• Ensure data protection by design and default in projects.
• Provide training on data protection and IG matters.
• Collaborate with stakeholders to ensure compliant data handling.
• Support third-party security assessments and audits.

Skills

Information governance

NHS IG & Caldicott

GDPR

ISO 27001

PCI DSS

Stakeholder management

Communication

Education

GDPR Practitioner Certification

Tools

OneTrust

Job description

Information Governance Manager

Location: Kent

Contract: 6 Month FTC

An excellent opportunity has arisen for an experienced Information Governance Manager to join an established organisation operating within the healthcare sector.

Reporting to the Group Data Protection Officer, you will play a key role in ensuring compliance with data protection legislation, strengthening the organisation's information governance framework and promoting a positive data protection culture.

A major focus of the position will be supporting a data protection modernisation programme, including transferring Records of Processing Activities (RoPA), DPIAs and LIAs onto the OneTrust platform.

The Role

As Information Governance Manager, you will:

• Lead the modernisation of the RoPA process, transferring it onto the OneTrust platform.
• Implement streamlined DPIA and LIA processes, supporting assessments and advising on appropriate mitigation strategies.
• Develop, review and update information governance and data protection procedures and guidance.
• Ensure projects embed data protection by design and by default.
• Provide training and guidance on data protection and information governance matters.
• Work closely with stakeholders to ensure data handling processes comply with relevant legal and regulatory requirements.
• Support third-party supplier security and compliance assessments and help identify areas for security improvement.
• Provide advice and challenge around data protection legislation and cyber security.
• Support the Group DPO with audits to assess compliance with information governance policies and procedures.

About You

Ideally, you will have:

• Extensive experience within an Information Governance role within the healthcare environment
• A deep understanding of NHS Information Governance and Caldicott principles.
• Strong knowledge of GDPR, ISO 27001 and PCI DSS requirements.
• Experience supporting information governance programmes, including risk management activities.
• Experience of third-party audit and compliance management.
• A Data Protection qualification such as GDPR Practitioner Certification would be desirable.
• Strong stakeholder management and communication skills, with the ability to communicate effectively with both technical and non-technical audiences.
• A methodical, thorough and highly organised approach.
• The ability to work calmly and collaboratively in a fast-paced environment.