As part of our continued investment in governance, information security and regulatory compliance, we are seeking an IT Compliance & Information Governance Officer to support the organisation's compliance activities across a growing portfolio of regulatory, certification and NHS requirements.
It is a hands-on role focused on maintaining our GDPR, ISO 27001, ISO 9001 and NHS Data Security & Protection Toolkit (DSPT) requirements. You will be responsible for keeping documentation up to date, coordinating audit activity and ensuring compliance processes are operating effectively day-to-day.
The role is operational rather than strategic. It is about keeping things organised, audit-ready and under control.
This is a full-time remote position, working Monday to Friday. The role is ideally suited to someone currently working in a compliance, governance, information governance or audit support role who is looking to take the next step in their career.
You will work across IT, HR and operational teams to support compliance activities and help ensure the organisation remains compliant with regulatory, contractual and NHS requirements. Please note that occasional travel to company locations may be required for meetings, audits or business needs.
Your Duties and Responsibilities
- Maintain compliance trackers including DSAR logs, DPIA registers, risk registers and DSPT action plans
- Support the annual DSPT submission and maintain audit-ready evidence throughout the year
- Organise and maintain ISO 27001 and ISO 9001 documentation
- Coordinate audit preparation and gather evidence for internal and external audits
- Track and support DSARs, DPIAs and other data protection activities
- Monitor compliance training and follow up on completion gaps
- Support supplier due diligence and compliance assessments
- Produce compliance reports, dashboards and management information
- Identify gaps in documentation, controls or evidence and drive actions to completion
- Support compliance activities required to maintain existing NHS contracts and support future tender opportunities
- Support the organisation in responding to new regulatory, compliance and legislative requirements as they emerge
To Be Successful in This Role
- Compliance trackers are accurate, up to date and actively maintained
- DSPT evidence is organised and audit-ready
- ISO documentation is current, controlled and easily accessible
- Compliance reporting is consistent, accurate and valued by management
- Compliance administration is operating effectively with minimal supervision
- Audit preparation activities are structured, efficient and well organised
Essential
- Experience working in a compliance, governance, information governance, audit or similar support role
- Strong organisational skills and attention to detail
- Experience maintaining records, trackers, controlled documentation or audit evidence
- Ability to manage multiple deadlines, priorities and workstreams
- Good understanding of GDPR and data protection principles
- Confident working across departments including IT, HR and operational teams
- Good Microsoft 365 skills, particularly Outlook, Word and Excel
Desirable
- Experience with ISO 27001, ISO 9001 or similar management systems
- Experience supporting NHS DSPT compliance activities
- Exposure to DPIAs, DSARs, incident management or audit processes
- Experience within healthcare, NHS or other regulated environments
- Information governance, compliance or audit-related qualifications
About Steeper
Steeper Group is a privately-owned business that was formed over 100 years ago. Since then we have expanded across prosthetics, orthotics and accessible technology – with a focus on creating significant turning points in individuals’ lives through exceptional clinical services and award-winning products.
We are a true leader in our market. From humble beginnings, we have grown to become one of the UK’s largest suppliers of Orthotic, Prosthetic and Accessible Technology products. Uniquely, we combine age-old craft skills with the latest innovations in manufacturing and materials.
Steeper’s vision is to create life’s turning points, together. We aim to do this with innovative prosthetic, orthotic and accessible technology products and services.
#J-18808-Ljbffr
IT Compliance & Information Governance Officer in Leeds employer: Steeper Group
Steeper Group is an exceptional employer, offering a unique opportunity for Orthotic Technicians to make a meaningful impact on people's lives through innovative orthotic solutions. Located in Leeds, our supportive work culture fosters collaboration and professional growth, with benefits such as competitive salaries, incremental holiday allowances, and qualification support, ensuring that our employees thrive both personally and professionally.
