Information Governance Compliance Officer

The post holder will be a key member of the Information Governance (IG) team, providing a comprehensive, high-quality, confidential service to Provide Group.

The post holder will perform a range of general and specialist duties related to Information Governance systems and processes, with a particular focus on Compliance.

The primary objective of this role is to lead specific Information Governance programmes, ensuring work is carried out effectively and professionally. The role includes developing and implementing Information Security, Confidentiality, and all key IG Policies and protocols across Provide CIC and Group companies, ensuring compliance across the organization.

Accurate project documentation and the coordination of time-critical work are essential responsibilities of this role.

Key Responsibilities:

1. Carrying out Data Protection audits to monitor and assess compliance against IG Policies and Procedures, National Standards, Contractual clauses, and relevant Data Protection Laws.
2. Maintaining the organisation’s Information Asset Register (IAR) and Records of Processing Activities (ROPA) to ensure compliance with UK GDPR and DPA2018.
3. Liaising with IT and Cyber Security teams and other stakeholders to manage Information Security risks and ensure compliance with standards such as ISO27001, Cyber Essentials, and the National Data Guardian Standards.
4. Providing training on new IG systems and processes.
5. Supporting the processing of Information Sharing Agreements.
6. Assisting with completing Data Protection Impact Assessments (DPIA).
7. Recording all work in line with organisational procedures, ensuring requests are appropriately approved and authorized through change control processes.
8. Providing administrative support for programmes and projects, working according to PRINCE2 Project Management standards.
9. Supporting evidence collection for the DSP Toolkit, ensuring it is cohesive, self-explanatory, and relevant to the financial year assessment.
10. Supporting the development, implementation, monitoring, and maintenance of IG Policies and procedures to ensure compliance with Data Protection Act 2018, Access to Health Records Act, and other relevant legislation.

Provide is a Community Interest Company (social enterprise) delivering a broad range of health and social care services in the community, committed to safety, responsiveness, and high quality. Owned by its employees, profits are reinvested into the community or services.

We operate from various community settings, including hospitals, clinics, schools, nursing homes, primary care, and homes, offering over 40 services across Essex, Dorset, East Anglia, and North England.

As a highly respected, award-winning health and social care provider, we expect our staff to uphold our values:

• Vision: Transforming Lives
• Values: Care, Innovation, and Compassion
• Mission: An ambitious, employee-owned social enterprise growing in influence, transforming lives through care, treatment, and education.

We are an equal opportunity employer committed to diversity, with active LGBT+ and Ethnic Minority Networks. We welcome applicants from underrepresented groups. If you have the skills and experience, please apply regardless of background.

Eligible for NHS Pension

For further details or informal visits, contact:

Name: Petra Lastivkova
Job Title: Information Governance Manager
Email:
Telephone: 07970682870

#J-18808-Ljbffr