Job vacancy: Information Governance Manager / Data Protection Officer, South West London and St George's Mental Health NHS Trust, Surbiton

Job summary

Main area: Information Governance
Grade: NHS AfC: Band 8a
Contract: Permanent
Hours: Full time - 37.5 hours per week
Job ref: 294-CORP-7842511-JB

Employer: South West London and St George's Mental Health NHS Trust
Employer type: NHS
Site: Tolworth Hospital
Town: Surbiton
Salary: £61,631 - £68,623 per annum inclusive of outer London HCAS
Salary period: Yearly
Closing: Today at 23:59

Information Governance Manager / Data Protection Officer

NHS AfC: Band 8a

South West London and St George's Mental Health NHS Trust has a rich history, well-established community links and an international reputation. We provide a full range of local mental health services to the Kingston, Merton, Richmond, Sutton and Wandsworth London boroughs, as well as specialist forensic mental health services, including specialised services such as national deaf adults and CAMHS inpatients and OCD.

We are committed to providing high quality integrated health and social care for local people with mental health problems in South West London and more specialist mental health services for people throughout the UK. The Care Quality Commission already rates our services as ‘good’ however we aim to be ‘outstanding’.

Our Values

We take pride in providing specialist care to our service users where our Trust values; being consistent, compassionate, collaborative, respectful and open is at the heart of everything we do. Our mission is "making life better together".

When you join us, you’ll be part of something special – an innovative and rapidly growing organisation that is helping to redefine the Mental Health, education and social care landscape in the UK.

As a Trust, we are happy to talk flexible working.

Detailed job description and main responsibilities

• Act as source of expertise on Information Governance Issues to the Trust providing specialist advice and assistance to staff where required on areas of complex information governance legislation, such as the UK GDPR / Data Protection Act 2018 and the Confidentiality: NHS Code of Practice; ensure that this specialist knowledge is kept up to date and changes in legislation or national and local policy are communicated effectively to staff at all levels within the organisation

• Support the Trust’s Data Protection Information Governance Group (DPIGG) and the Trust’s Caldicott Guardian in the implementation of Information Governance policies and procedures, in particular, the recording, storage and exchange of person-identifiable information.

• Lead maintenance of the Trust’s Data Security Protection (DSP) Toolkit work programme, co-ordinating with and supporting key staff in meeting requirements and expectations of this governance framework; ensure compliance to deadline of the annual DSP Toolkit online assessment

• Implement policies and procedures for the secure and efficient management of clinical records as required by the Data Protection Act 2018 and Caldicott Report recommendations.

• Assist in the development and delivery of the information Governance Improvement/Action plan and audit of the DSP Toolkit submission to confirm score compliance; service and support the Trust’s Data Protection Information Governance Group and other related meetings as appropriate both internal and external to the Trust.

• Act as expert in regard to IG incidents leading the assessment, action planning and final signoff of information governance incidents.

• Act as Trust nominated Information Security and Privacy Officer undertaking regular monitoring of system usage and compliance, development of security policies, controls and procedures in liaison with appropriate managers and ensuring appropriate documentation and guidance exists for members of staff.

• Proactively work with operational managers, the Senior Information Risk Owner (SIRO), Information Asset Owners (IAOs), Information Asset Administrators (IAAs) and other stakeholders to ensure the information risk management structure processes meet the business and data security requirements of the organisation.

• Be responsible for the administration of access to medical records, liaising between applicants and health professionals, ensuring that time limits and patients’ rights are adhered to; responsible for ensuring that there are documented requirements for access controls for all key information assets identified in the organisations asset register.

• Lead the Information Governance training programme, including planning and liaison with the Trust’s learning & Development department for the regular delivery of IG training sessions, both online and face to face as required; review content of training material.

• Give face to face IG training to new starters as part of the Welcome Day / Induction programme.

• Ensure secure processing of personal and otherwise confidential data by proactively monitoring activity, such as secure email, access request disclosure, physical checks of workstations.

• Ensure that there are suitable mechanisms for access to and disclosure of records as per the Data Protection Act and other legal routes of access to data.

• Be responsible for corresponding with external organisations and authorities regarding third party requests for mental health & social care records.

• Ensure that the Trust has an accurate, complete and maintained Data Protection Registration, including annual renewal of the associated Information Commissioner’s Office (ICO) fee.

• Ensure Information Governance documentation on the Trust’s website and intranet (InSite) are accurate and kept up to date, including the Privacy Notices.

• As Data Protection Officer (DPO) – monitor internal compliance with the UK GDPR / Data Protection Act 2018, inform and advise on the Trust’s data protection obligations, provide advice regarding and sign off Data Protection Imapct Assessments (DPISs), and act as a contact point for data subjects and the Information Commissioner’s Office (ICO).

Person specification

Training & Qualification

Essential criteria

Educated to Degree level
Evidence of continuous professional development.

Desirable criteria

Appropriate Health Informatics or other post-graduate qualification.
Professional qualification in information governance

Experience

Essential criteria

Experience of working in a project environment.
Experienced of Drafting policy documents
Experience of working on information governance issues.

Desirable criteria

Experience of working in Health & Social Care Records Department
Experience of working in an NHS environment.

Knowledge & Skills

Essential criteria

Good understanding of the NHS Information Governance agenda and the DSP Toolkit
Knowledge of the Data Protection and Freedom of Information Act
Management and team leadership skills
Excellent report writing and presentation skills

Desirable criteria

Knowledge of the NHS National Programme for IT.

At South West London St Georges Mental Health Trust we are committed to providing services which embrace diversity and that promote equality of opportunity. We are a Disability Committed Employer, and welcome applications from all sections of the community and people of all protected characteristics. We are Members of Stonewall Diversity Champions and Employers Network for Equality and Inclusion.

As part of the Trust's commitment to Equalities and Diversity, the Trust supports the establishment of Staff Networks groups to promote diversity in the workplace:

BME (Evolve) Staff Network
Christian Staff Network
DiverseAbility
Deaf Staff Network
Mental Health Staff Forum
Women's Staff Network
LGBTQIA+

We are committed to supporting the Armed Forces Community and has signed the Armed Forces Covenant.

We provide reasonable adjustments to the interview process for any candidates with a disability.

Please note:

That the closing date listed is a guide only and that the vacancy may close earlier should sufficient number of applicants have been received
That once you have submitted your application you agree to your application being transferred to a 3^rd party e-recruitment system
That should you not have heard from us within three weeks from the closing date your application has not successful
That priority consideration for applications may be given to at-risk NHS employees
That should you be successful and appointed, you authorise South West London and St George's Mental Health NHS Trust to confirm your previous NHS service via an Inter Authority Transfer (IAT) process
That your employment is offered subject to successful completion of a Probationary Period depending on your Band (except medical roles)
That we are a smoke-free Trust