Senior Information Governance Manager

The National Institute for Health and Care Research (NIHR) is funded by the Department of Health and Social Care (DHSC). We work in partnership with the NHS, universities, local government, other research funders, patients, and the public. The NIHR funds, enables, and delivers world-leading health and social care research that improves people's health and wellbeing and promotes economic growth. We are also a major funder of applied health research in low- and middle-income countries. 

The Team

The Governance, Performance and Improvement (GPI) is a small team of individuals who have primary and secondary responsibilities to mitigate against single points of failure. All members of the team will have the opportunity to work across all areas of responsibility, which offers individuals a breadth of experience and development. The team is responsible for ensuring that GMG delivers its services effectively and efficiently within corporate, customer and regulatory requirements.

The advertised post is a central role within the GPI team and will work closely with colleagues in the Digital Improvements team at GMG as well as other Information Colleagues across NIHR and the corporate IS/IT teams in NIHR and LGC. The role will be responsible, covering all aspects of Information Governance including overseeing compliance with Data Protection legislation including GDPR and effective records management..

Job purpose

• To lead on Information Governance and embed best practice across GMG through the development and implementation of an effective Information Governance Framework
• To deliver proactive information management support with a particular focus on data protection but with the ability to support the wider information and records management agenda. 
• To provide specialist technical advice in response to staff queries and ensure that training and guidance documentation (including Frequently Asked Questions (FAQs)) accurately reflects the needs of the organisation. In particular leading on the work to embed GDPR best practice across the institution you will be required to transfer knowledge, share best practice and develop the GDPR Champions across the GMG.
• Custodian of the Business Continuity Plan for GMG 

Key accountabilities

• To support GMG in carrying out Data Protection Audits, Data Protection Impact Assessments and ensuring that the ROPA is up to date and maintained
• To lead on managing and responding to information rights requests under the General Data 
• Protection Regulation (GDPR), the Data Protection Act 2018 (DPA 2018)
• To use your expert knowledge to advise staff and senior on complex queries to ensure responses are in line with legislative requirements;  
• To take ownership for developing and then assuring the accuracy and timeliness of metrics relating to information rights requests; 
• To advise on information and records management best practice including the implementation of records retention; 
• To assist the NIHR Information Governance Group and take the lead on specific work streams to monitor and embed compliance with GDPR and DPA 2018 across NIHR including records of processing activity, the delivery of training and the development of guidance and FAQs; 
• Lead on the GDPR Champions workshops to ensure sharing of best practice, adherence to policies and monitoring the level of compliance. 
• To assist in the ongoing review and updating of GMG’s information governance policy documentation; 
• To lead on the handling of data protection incidents or breaches promptly;  
• To contribute to reports for SLG on compliance with the relevant legislation; 
• Undertake the local role of GMG’s Data Protection Officer, in line with the General Data Protection Regulation and/or other associated legislation. Liaise, where appropriate, with LGC’s Enterprise Risk Management team. 
• In conjunction with the Assistant Director of GPI, Assistant Director of Digital Improvement and the Business Information Manager develop, implement and review the GMG’s processes and procedures for dealing with requests under the data protection legislation, and assist with and provide advice in relation to such requests to all staff within GMG.  
• To support the work of the GPI team relating to corporate governance and risk management as and when required

Why work for us
Join our team and you’ll be working with an exceptional organisation who manage high quality health and care research for the benefit of patients and the public. NIHR is one of the UK’s largest funders of health and care research.

Salary & Benefits

• £45,700 PA more for an exceptional candidate
• Bonus - subject to company performance
• 25 days annual leave, plus public holidays (UK)
• Enhanced contributory pension scheme
• Life Insurance
• Benenden Healthcare
• Season Ticket Loan
• Laptop, IT equipment and remote IT support

NB: We offer a range of work life balance and family friendly, flexible working arrangements.
This is an office based, home working (hybrid) role with an expectation for all employees to attend our offices a minimum of 4 days a month, which might increase, subject to team requirements.

Applications
If you are interested in working with us and feel you have the appropriate background and skills, please apply with your CV, with the cover letter attached in the same document , explaining what you feel you could bring to the company, outlining your suitability for the role.