Information Governance Specialist & Compliance Officer inManchester inManchester PUBLISHED WED 13 NOV 2024

As an IG Specialist you will have a proved track record in providing advice and guidance on use and security of processing personal data as part of projects and systems. If you have an eye for details and ability to work well with a range of stake holders, with a desire to make processes smoother for patients whilst ensure their data rights are upheld, reach out and get in touch.

A range of compliance duties are required to maintain standards of data protection and Caldicott principles across the trust, from staff understanding to correct access to audit of personal data held in systems. Investigating incidents and horizon scanning for upcoming standards and case reviews.

The role of Information Governance Specialist and Compliance Officer is to provide essential support to the Trust on the range of Data Protection and Confidentiality work required to promote privacy of patients (and other data subjects for whom the Trust is accountable), providing leadership, expertise and assistance. This is a senior IG role and you will have a chance to input and influence the strategic direction of our Trust's Data Protection thinking and policy

This is a varied and challenging administrative support role which spans the entire organisation. Additionally, skills and experience in managing and testing compliance against set standards would be drawn upon to help Digital Services Leads and Information Asset Owners demonstrate assurance and improvement against the standards they are responsible for.

You will be expected to work independently, to review Data Protection Impact Assessments and wider Data Protection compliance standards.

Carry out audits, challenge local processes and produce reports with recommendations and track action plans to control risks.

Support the Data Protection Officer and Caldicott Guardian.

Provide Line Management support for the Freedom of Information staff and provide advice around application of exemptions.

Be experienced in leading Caldicott and Data Protection meetings, with production of papers and facilitating the meetings

About us

DUTIES AND RESPONSIBILITIES

Support specialist confidentiality and privacy by design advice on the implementation of the IG legal framework, IG national policy requirements, new Statutory Guidance, organisational standards, policies and controls across internal and external facing operational services.

Draft and publish IG advice in response to IG queries received, emerging trends and new national guidelines from across the organisation.

Support strategic advice to the Freedom of Information (FOI) lead and key stakeholders on complex requests, internal reviews and ICO investigations.

Provide line management responsibilities for the Freedom of Information lead ensuring that all aspects of performance, attendance, training and appraisal are addressed in accordance with Trust Policy.

Expected to Deputise for the IG Lead as necessary, on matters within scope of expertise.

Plan and progress work to ensure that IG policies and procedures are embedded in the programmes, divisions across the organisation. Reporting assurances/gaps on outcomes of best practice and standards set out in policy and procedures to Divisional leads and Caldicott panel.

Plan and deliver training to Trust staff at all levels, through a variety of formats designed to meet the specific needs of the organisation with reference to GDPR and FOI.

Provide leadership in managing the statutory information requests function of the IG Team, including FOI, information rights requests.

Provide assurance on Information Governance and Statutory Guidance compliance through a schedule of assurance reviews and activity, including in respect of high-risk processing, internal data protection audits, and audits of data use and sharing, both internal and external to the Trust.

Assist assurance for Digital Services Leads and Information Asset Owners in their compliance against standards, through peer reviews, engagement with audits, advice and guidance of compliance management.

Drive compliance with the Confidentiality elements of the Data Security & Protection Toolkit (DSPT or equivalent) requirements and support work to co-ordinate and assure the Trust annual DSPT or equivalent submission. Work Collaboratively with Divisions to evidence their compliance with principles of the DSPT and the Digital teams on wider components

Lead on maintenance of the Trust Register of Processing Activities (RoPa) including reviews of Data Flows, within Divisions, from Systems and provision of data sets supporting audit/research/analysis. Being the lead for establishing correct legal basis for any processing of data, inclusive of use of consent and national data opt out.

Collaborate with key Stake Holders (internal and external to the Trust) on Supply Chain Risks. Considering current supplier due diligence requirements, on boarding the Information Asset Owners (IAOs) with key programmes of assurance and maintaining accuracy of the Information Asset Register.