IT Compliance & Information Governance Officer

Steeper Group; Leeds; Hybrid; GBP 42,000 - 56,000; Full time

Job summary

Steeper Group is seeking an IT Compliance & Information Governance Officer to support GDPR, ISO 27001/9001 and NHS DSPT requirements across IT, HR and operations. The role is hands-on, audit-ready and reporting-focused, with occasional travel to company locations for meetings and audits.

It’s a full-time remote position, Monday to Friday, suited to someone already in compliance or governance support and looking to advance their career.

Qualifications

• Experience in compliance, governance, information governance or audit support.
• Strong organisational skills with attention to detail.
• Good understanding of GDPR and data protection principles.
• Proficiency with Microsoft 365 apps including Outlook, Word and Excel.
• Ability to manage multiple deadlines and workstreams across IT, HR and operations.
• Experience maintaining records, trackers and audit evidence.

Responsibilities

• Maintain compliance trackers (DSAR logs, DPIA registers, risk registers, DSPT action plans).
• Support annual DSPT submission and maintain audit-ready evidence.
• Organise and maintain ISO 27001 and ISO 9001 documentation.
• Coordinate audit preparation and gather evidence for internal/external audits.
• Track DSARs, DPAs and other data protection activities.
• Monitor compliance training and address completion gaps.
• Support supplier due diligence and compliance assessments.
• Produce compliance reports and management information.
• Identify documentation gaps and drive actions to completion.
• Support NHS contracts compliance and future tenders.

Skills

Compliance experience

Organisational skills

GDPR knowledge

Microsoft 365

Cross-functional collaboration

Audit support

Documentation management

DSAR/DPIA knowledge

Tools

Outlook

Word

Excel

Job description

As part of our continued investment in governance, information security and regulatory compliance, we are seeking an IT Compliance & Information Governance Officer to support the organisation's compliance activities across a growing portfolio of regulatory, certification and NHS requirements.

It is a hands-on role focused on maintaining our GDPR, ISO 27001, ISO 9001 and NHS Data Security & Protection Toolkit (DSPT) requirements. You will be responsible for keeping documentation up to date, coordinating audit activity and ensuring compliance processes are operating effectively day-to-day.

The role is operational rather than strategic. It is about keeping things organised, audit-ready and under control.

This is a full-time remote position, working Monday to Friday. The role is ideally suited to someone currently working in a compliance, governance, information governance or audit support role who is looking to take the next step in their career.

You will work across IT, HR and operational teams to support compliance activities and help ensure the organisation remains compliant with regulatory, contractual and NHS requirements. Please note that occasional travel to company locations may be required for meetings, audits or business needs.

Your Duties and Responsibilities

• Maintain compliance trackers including DSAR logs, DPIA registers, risk registers and DSPT action plans
• Support the annual DSPT submission and maintain audit-ready evidence throughout the year
• Organise and maintain ISO 27001 and ISO 9001 documentation
• Coordinate audit preparation and gather evidence for internal and external audits
• Track and support DSARs, DPIAs and other data protection activities
• Monitor compliance training and follow up on completion gaps
• Support supplier due diligence and compliance assessments
• Produce compliance reports, dashboards and management information
• Identify gaps in documentation, controls or evidence and drive actions to completion
• Support compliance activities required to maintain existing NHS contracts and support future tender opportunities
• Support the organisation in responding to new regulatory, compliance and legislative requirements as they emerge

To Be Successful in This Role

• Compliance trackers are accurate, up to date and actively maintained
• DSPT evidence is organised and audit-ready
• ISO documentation is current, controlled and easily accessible
• Compliance reporting is consistent, accurate and valued by management
• Compliance administration is operating effectively with minimal supervision
• Audit preparation activities are structured, efficient and well organised

Essential

• Experience working in a compliance, governance, information governance, audit or similar support role
• Strong organisational skills and attention to detail
• Experience maintaining records, trackers, controlled documentation or audit evidence
• Ability to manage multiple deadlines, priorities and workstreams
• Good understanding of GDPR and data protection principles
• Confident working across departments including IT, HR and operational teams
• Good Microsoft 365 skills, particularly Outlook, Word and Excel

Desirable

• Experience with ISO 27001, ISO 9001 or similar management systems
• Experience supporting NHS DSPT compliance activities
• Exposure to DPIAs, DSARs, incident management or audit processes
• Experience within healthcare, NHS or other regulated environments
• Information governance, compliance or audit-related qualifications

About Steeper

Steeper Group is a privately-owned business that was formed over 100 years ago. Since then we have expanded across prosthetics, orthotics and accessible technology – with a focus on creating significant turning points in individuals’ lives through exceptional clinical services and award-winning products.

We are a true leader in our market. From humble beginnings, we have grown to become one of the UK’s largest suppliers of Orthotic, Prosthetic and Accessible Technology products. Uniquely, we combine age-old craft skills with the latest innovations in manufacturing and materials.

Steeper’s vision is to create life’s turning points, together. We aim to do this with innovative prosthetic, orthotic and accessible technology products and services.