Information Governance Assurance Officer

Job Purpose

The post holder will assist and deputise for the Information Governance Assurance Manager with activities related to the delivery and coordination of the Data Security and Protection Toolkit (DSPT), CQC, and general information governance assurance across the NHS organisation. The role involves working alongside multidisciplinary teams to maintain compliance with legislative, statutory, and regulatory requirements.

Location

Norwich

Job Type

Temporary

Duration of Booking

Expected to last 3 months with possible extension

Proposed Start Date

ASAP

Pay Rates

• Up to £25 per hour Umbrella
• £22 per hour PAYE inclusive of holiday pay

Hours / Working Days

• 37.5 hours per week
• Monday to Friday, 9am – 5pm

Sector

Healthcare

Based

Office / Hospital

Key Responsibilities

• Governance Framework: Assist in implementing, managing, and assuring an information governance framework compliant with relevant IG legislation, standards, and guidelines.
• Risk Assessments: Complete Data Protection Impact Assessments (DPIAs) and identify privacy risks associated with new projects, systems, or policies.
• Audit & Asset Management: Develop and manage the internal IG audit schedule, participate in spot-check audits, and support data flow mapping and Information Asset Register activities.
• Reporting & Escalation: Collate, analyze, and present IG risk and assurance data for senior bodies, including the Caldicott and Information Governance Assurance Committee and Hospital Management Board.
• Incident Management: Process and monitor responses to IG incidents and data breaches using Datix, ensuring actions are completed and potential patient harm is escalated.
• Training & Awareness: Develop, maintain, and deliver face-to-face and e-learning IG training programs (data quality, confidentiality, security) for all staff levels.
• Data Sharing & Rights: Monitor compliance with data protection laws regarding external data sharing agreements and handle data subject rights (e.g., Subject Access Requests and complaints).
• Deputising: Represent the Information Governance Assurance Manager at key committee meetings, including the Serious Incident Group and Divisional Governance Committees.