Privacy and Risk officer | South London and Maudsley NHS Foundation Trust

South London and Maudsley NHS Foundation Trust; Greater London; On-site; GBP 30,000 - 45,000; Full time

Job summary

A leading NHS trust in Greater London seeks an enthusiastic professional for an information governance role. You will assist the Privacy Manager, ensure GDPR compliance, and support information governance operations. The role offers flexible working hours, career development opportunities, and a supportive environment. Ideal candidates will have a relevant degree, experience in data protection, and excellent communication skills. This is a chance to contribute positively to patient information handling.

Benefits

Flexible working hours

Ongoing training and development

Career progression pathways

Qualifications

• Enthusiastic and self-motivated professional with knowledge of GDPR.
• Experience with data security and information governance.
• Ability to undertake surveys and assessments.

Responsibilities

• Assist the Privacy Manager with Data Protection Impact Assessments.
• Maintain compliance with the Information Asset Register.
• Produce reports and provide administrative support.

Skills

Data Protection Impact Assessments

Privacy compliance

Communication skills

Analytical skills

Education

Relevant degree or equivalent experience

Job description

The post-holder will be an enthusiastic, self‑motivated, innovative professional with good understanding of patient confidentiality, privacy, data security, social media and digital health and social care services.

The key objective of this role will be to provide assistance to the service with regards to the changes impacted by GDPR and to support the new requirements of the Data Security and Protection Toolkit.

Responsibilities

• Assist the Privacy Manager by providing Data Protection Impact Assessments and assurance for existing and upcoming services, applications, system developments across the Trust in key partnerships.
• Assess current and upcoming developments including service design, technical and innovative digital developments and applications for privacy impact and compliance with national information governance standards.
• Provide administrative support to the Information Security Committee.
• Maintain compliance with the Information Asset Register while supporting the overall information governance operation programme led by the Deputy IG Lead.
• Undertake surveys and assessments of staff and public learning needs as well as stakeholder engagement support.
• Act as a communication champion for the IG Team and support close links with local and regional stakeholder groups.
• Assist with privacy design, impact and outcomes of existing and upcoming services, applications, systems and policies across the Trust and in key partnerships.
• Assist with privacy‑enhancing techniques to maximise utilisation of healthcare and corporate data for service provision, improvements, audit, research and corporate governance whilst mitigating any impact on patient and public privacy.
• Co‑ordinate, negotiate and influence design of existing and upcoming services, applications, system developments across the Trust.
• Assist with Data Protection Impact Assessments and ensure delivery of the agreed actions through liaison with stakeholders in order to gain public and patient trust.
• Assist the Privacy Manager to ensure that the Trust meets the highest standards of privacy in the implementation of existing and upcoming services, applications, systems and policy development across the Trust.
• Produce reports for the Team and Digital Services.
• Provide administrative support for the cyber programme and the Information Security Committee.
• Act in an advisory role on best practice on privacy in line with health and social care standards.
• Undertake work to support the IG Team with the GDPR implementation plan.
• Support the Deputy IG Lead with the Data Protection Standards.
• Support the Information Governance Management team, the Data Protection Officer, Caldicott Guardian and the Chief Information Officer for the successful delivery of the Information Governance Action Plan.
• Support a customer‑focused and service user‑centred service model and culture.

Career Progression pathways and development opportunities

We are committed to get the very best out of our staff and support staff in their career aspirations. We have career pathways available, where you will be able to develop your skills and build on your experience to progress into other roles across different specialties. For this role, we offer career pathways to Senior manager roles within the IG and the wider team. In addition, we offer ongoing training and development in conjunction with the BCS membership.

Flexible working

As one of the few Trusts in London we are proud to offer flexible working as part of our new ways of working, and we are happy to talk flexible working at the interview stage. In this role you will be able to work Monday to Friday in the time frames from 8am to 6pm, giving you the very best of good work life balance.

The role sits within the Information Governance function, which forms part of the Digital Services team.

Information governance (IG) provides a framework to bring together all the legal rules, guidance and best practice that apply to the handling and security of information.

IG is about setting a high standard for the handling of information through a robust IT security assurance and complying with the law and national standards.

We ensure a high standard of information handling across the Trust, covering information security, data protection, freedom of information and privacy.

About our locations

Maudsley Hospital (headquarters)
Our Trust headquarters is located at Denmark Hill less than 5 minutes from the train station (zone 2) and is within walking distance from the beautiful green spaces of Ruskin park and the vibrant high‑street that offers great shopping opportunities and a wide range of restaurants.

The post holder will be expected to demonstrate independent working skills with minimum supervision, confidence and expertise to advise on issues that relate to data privacy, information assets, assurance, good social media and digital health app governance.

This advert closes on Monday 15 Dec 2025.