The post holder will support the delivery of the Trust’s Information Governance (IG) framework by working closely with the Head of Information Governance on key operational areas including compliance monitoring, policy development, and incident management. The role involves undertaking audits and site visits across clinical and corporate areas to assess compliance with IG policies, developing recommendations to address risks, and reporting progress to governance groups. The post holder will contribute to the development and maintenance of Trust-wide IG policies and ensure they are effectively implemented and regularly reviewed. As a subject matter expert, they will provide advice on Data Protection Impact Assessments, support IG elements of Trust projects, and lead on the management of IG incidents, including escalation of reportable breaches to the DPO and SIRO. They will also maintain key IG assets such as the Information Asset Register, support Information Asset Owners in meeting their responsibilities, and lead the development and delivery of IG training programmes. Working collaboratively with the Head of Information Governance, the post holder will take ownership of specific projects and workstreams, providing a flexible and resilient resource to meet the Trust’s evolving IG requirements. Ensure appropriate evidence is captured for audit and submission for IG related assertions within the Data Protection Security Toolkit (DSPT) external assessment. Provide support to the Head of IG in coordinating the completion of the DSPT including; identifying requirements, evidence and gaps, structuring the action plan, ensure appropriate evidence is available and that the assessment is submitted within the required deadline.
Key Responsibilities
- Develop recommendations to resolve issues of non-compliance in the Trust offering a range of options which are suitable both for service provision and for legislative compliance.
- Monitor and audit compliance with policies and procedures across the Trust through site visits, including inpatient, outpatient and corporate areas, initiating actions to address areas of non-compliance and reporting on progress and risks to the IG Manager and governance groups.
- Write, implement, review and update Trust wide Information Governance policies, guidelines, protocols, procedures and processes to ensure safe and effective management of information across the Trust. Overall responsibility for IG policies remains with the IG Manager.
- Provide advice and monitoring on Data Protection Impact Assessments (DPIAs) and ensure that DPIAs are carried out on all relevant projects. Represent IG at projects across the Trust, providing subject matter expertise, giving advice and guidance on all aspects of IG including supporting the completion of DPIAs.
- Provide expert advice on the response to all IG incidents and security breaches, undertake appropriate audits, and work closely with the investigating officer. Act as a subject matter expert for serious incidents that involve IG, ensuring appropriate action is taken and advising on breaches of policy for disciplinary action. Ensure ICO reportable incidents are escalated to the DPO and SIRO within the legal timeline, and critical steps are taken to protect an individual’s data.
- Lead on Data quality monitoring & feedback activities using information gained from FOI and SAR management activities.
- Lead on FOI Management. Managing the processing, triaging, and formulation of responses under the FOI Act 2000, Environmental Information Regulations (EIR), and Data Protection Act.
- Acting as the subject matter expert on FOI, advising senior leaders, clinicians, and executive teams on exemptions, redactions, and handling high-profile or sensitive requests.
- Line managing FOI officers and other administrative staff undertaking IG work, overseeing their day-to-day workflow, and fostering continuous improvement.
- Monitoring FOI performance against statutory deadlines, identifying areas for improvement, and reporting compliance metrics.
- Developing and delivering FOI policies, publication schemes, and staff training to ensure organisation-wide compliance
- To develop and maintain the Trust’s Information Asset Register, maintain the Information Asset Owners register and educate them on their responsibilities including, Business Continuity Plans, Risk Assessments, Data Flow Mapping and System Level Security Policies, ensuring these are updated.
- To be responsible for the development of training, delivery, and overseeing the on-going review of the IG training program across the Trust.
- Lead on individual projects and areas of responsibility, working closely with the Head of IG and DPO providing a resilient and flexible IG resource to meet the demanding and variable IG requirements from the Trust. Appropriate certified data protection or information governance qualification (such as BCS Practitioner Certificate in Data Protection, CISMP, UK GDPR Practitioners Certificate) or equivalent experience
- Evidence of continuous professional development in relation to Information Governance and changes in legislative requirements
- Expert knowledge of information governance requirements including relevant legislation and regulation
- Thorough knowledge of UK General Data Protection Regulation, Data Protection Act 2018 and their application, of the Freedom of Information Act 2000 and Environmental Information Regulations 2004 and their application
- Experience of developing and delivering targeted information governance training and evaluating success
- Good understanding of governance, assurance and audit requirements and how these relate to an NHS Foundation Trust
- Understanding of the threats, risks, and influences affecting the future of the NHS and wider healthcare provision and how to manage these
- Ability to determine priorities and deliver outcomes to deadlines
- Ability to communicate and influence effectively at all levels
- Excellent presentation skills and the ability to tailor material to varying audiences including preparation of reports and presenting at senior meetings
- Excellent written skills
- Ability to interpret complex information, offer informed advice and distil this into easily understood materials and messages
- Good risk knowledge with the ability to drive a positive culture around effective risk management
- Strong Information Technology skills
- The post holder must demonstrate a positive commitment to uphold diversity and equality policies approved by the Trust.
- Extensive experience working in an Information Governance role
- Proven experience of communicating with senior staff, ie consultants
- Exhibits high levels of integrity
- Experience of managing staff
- Ability to prioritise between competing demands and allocate resources accordingly and deliver to tight deadlines
Desirable Criteria
Qualification in Information/Cyber Security or equivalent experience
About the Trust
Oxford University Hospitals NHS Foundation Trust is one of the largest NHS teaching trusts in the country. It provides a wide range of general and specialist clinical services and is a base for medical education, training and research. The Trust comprises of four hospitals – the John Radcliffe Hospital, Churchill Hospital and Nuffield Orthopaedic Centre in Headington and the Horton General Hospital in Banbury. Our values, standards and behaviours define the quality of clinical care we offer and the professional relationships we make with our patients, colleagues and the wider community. We call this Delivering Compassionate Excellence and its focus is on our values of compassion, respect, learning, delivery, improvement and excellence.
Sexual Safety Charter
Sexual Safety Charter: In 2023 NHS England launched its first sexual safety charter, and our Trust proudly signed it. We pledge zero tolerance for inappropriate sexual behaviour and commit to the ten core principles Oxford University Hospitals promotes a safe, respectful hiring environment. If you want to make a difference with us, come and join our team. Together, we will uphold the highest standards of care and professionalism.
#J-18808-Ljbffr…