Senior Information Governance Officer

Isle of Wight NHS Trust; Portsmouth; Hybrid; GBP 40,000 - 50,000; Full time

Job summary

An NHS Trust in England is looking for a Senior Information Governance Officer to manage compliance with UK data protection law across multiple sites. The role involves reviewing Data Protection Impact Assessments, providing expert advice on regulations, and leading Information Governance initiatives. Ideal candidates will have a thorough understanding of UK GDPR and significant experience in data protection compliance and system administration. This position offers a meaningful opportunity to enhance patient and staff data protection standards.

Benefits

Professional development opportunities

Training in Information Governance

Collaborative working environment

Qualifications

• Detailed knowledge of UK GDPR, the Data Protection Act, and Freedom of Information Act.
• Significant experience with Data Protection compliance and system administration.
• Advanced skills in report production and excellent verbal and written communication.

Responsibilities

• Lead reviews of Data Protection Impact Assessments (DPIAs).
• Support Data Security and Protection Toolkit submissions.
• Manage and review Information Governance incidents.
• Provide expert advice on GDPR, FOIA, and DPA 2018.
• Deliver training and guidance on Information Governance best practices.

Skills

Knowledge of UK GDPR

Data Protection compliance

Excellent communication skills

Ability to manage competing priorities

Education

Degree level or equivalent

Qualification in Data Protection or Information Governance

Tools

Keyboard proficiency for reports and spreadsheets

Job description

As part of our Single Corporate Services, you'll play a vital role in ensuring both Trusts meet our legal and regulatory obligations around data protection and information governance. You'll be instrumental in maintaining high standards of compliance, transparency, and accountability across both organisations.

You'll be at the heart of managing Information Governance incidents, supporting with Data Protection Impact Assessments and the organisations annual Data Security and Protection Toolkit assessments. You'll have expertise in Records of Processing Activities to support with the organisations returns of Information Asset Registers and Data Flow Maps. You'll also contribute to policy development, and staff training helping to embed a culture of good governance and responsible data handling. You will be able to support the team with complex Subject Access Requests and Freedom of Information Requests. You'll work closely with colleagues across departments, providing expert advice and guidance on legislation such as the UK GDPR, Data Protection Act 2018, and Freedom of Information Act 2000. Your work will directly support the Trusts commitment to being well-led, safe, and patient‑focused organisations.

This is a multi‑site role, offering variety and the opportunity to work across two leading NHS organisations. Travel between sites may be required and will be arranged locally.

Main duties of the job

Senior Information Governance Officer

Full Time: 37.5 hours

Location: Mitchell Way, Portsmouth PO3 5PE or Queen Alexandra Hospital, Cosham, PO6 3LY, or St Marys Hospital Isle of Wight, PO30 5TG.

Are you passionate about data protection, information governance, and making a real impact in healthcare? We’re looking for an experienced Senior Information Governance Officer to join our proactive Information Governance team, supporting both Portsmouth Hospitals University NHS Trust and Isle of Wight NHS Trust.

As part of our Single Corporate Services, you'll play a vital role in ensuring both Trusts meet our legal and regulatory obligations around data protection and information governance. You'll be instrumental in maintaining high standards of compliance, transparency, and accountability across both organisations.

If you’re ready to take the next step in your IG career and contribute to the safe and effective management of information across two NHS Trusts, apply today and join us in shaping a safer, more compliant future for our Trusts.

About us

Our vision for Single Corporate ServicesIsle of Wight NHS Trust (IWT) and Portsmouth Hospitals University NHS Trust (PHU) have a shared vision of a single corporate service across our two organisations, supported by a single set of identical systems and processes, under joint leadership, to drive significant efficiencies, improve employee experience, and return time to patient care.

This vacancy is part of the Single Corporate Services Division.

Why are we changing the way we deliver Corporate Services? Working as a partnership, both IWT and PHU have a shared vision for excellence in care for our patients and communities; with a set of strategic aims underpinning how we will achieve this. The creation of a single corporate service is essential for us to support our clinical and operational services, and our wider transformation programme.

The single corporate service is delivered across both organisation. You may be based at either IWT or PHU and individuals may be required to undertake business travel between sites. For leaders managing staff across multi‑site locations, you will need to be visible and provide in‑person leadership. The arrangements and frequency will be agreed locally.

Job responsibilities

Your key responsibilities will include:

• Leading on reviews of Data Protection Impact Assessments (DPIAs)
• Support with the Data Security and Protection Toolkit (DSPT) submissions
• Managing and reviewing Information Governance incidents
• Reviewing and supporting Records of Processing Activities (ROPA)
• Provide expert advice on GDPR, FOIA, DPA 2018, and other Information Governance legislation
• Support IG Officers with complex Subject Access Requests and Freedom of Information Requests
• Support policy compliance and the transparency information
• Maintain accurate records and performance data.
• Deliver training and guidance on IG best practices.

Why Join Us?

• Make a meaningful difference in how patient and staff data is protected.
• Enjoy opportunities for professional development and training.
• Work in a role that values innovation, integrity, and collaboration

For additional information please see attached Job Description.

Person Specification

Knowledge

• Detailed knowledge of UK GDPR, the Data Protection Act, and Freedom of Information Act.

Experience

• Evidence of significant experience working with Data Protection compliance.
• Evidence of significant experience in system administration.
• Advanced skills for keyboard use for producing reports, spreadsheets and correspondence.
• Excellent verbal, telephone and written communication skills.
• Ability to use own initiative and deal with competing priorities.
• Works autonomously but can seek advice when necessary / manages a discrete area of work.
• Expertise within specialism, underpinned by practical experience.
• Management of team and line management responsibilities.

Qualifications

• Degree level (or equivalent)
• Qualification in Data Protection, Information Governance or Freedom of Information Act, Accredited Courses associated with Information Governance, Freedom of Information Act, Subject Access.

Employer name

Isle of Wight NHS Trust