Job summary
We are looking for a dedicated, enthusiastic, and self-motivated professional to be not just organized but the driving force behind streamlined operations and elevated service quality
?
Main duties of the job
As an Information Governance Officer, you will be at the forefront of our Information Security & Privacy work program, collaborating closely with the Data Protection Officer (DPO) and the Compliance Team. Your mission: to ensure unwavering compliance with InHealth Intelligences (IHI) cutting-edge Information Security & Privacy Strategy, data protection legislation, and ISO27001 Certification.
About us
InHealth Intelligence is part of the InHealth Group which is the UKs largest specialist provider of diagnostic and healthcare solutions. Our aim is to make healthcare better for patients by working collaboratively with the NHS to deliver a range of high-quality tests, scans, assessments and procedures. In the last year, we have supported more than 4 million people in their healthcare journeys, the majority of these are NHS patients and service users.
As a people-focused organisation, our teams are integral in how we deliver our services and our values of Trust, Passion, Care and Fresh Thinking underpin everything we do, influencing the way we interact with patients, customers, and colleagues.
Our mission is to be the preferred provider of high-quality diagnostics and healthcare solutions in hospitals and in accessible community settings, serving 5 million patients from 1,000 locations by 2025.
Job description
Job responsibilities
Role: Information Governance Officer Location: Middlewich/Hybrid with travel to sites throughout the UK when needed. Salary: 30,000 We are looking for a dedicated, enthusiastic, and self-motivated professional to be not just organized but the driving force behind streamlined operations and elevated service quality As an Information Governance Officer, you will be at the forefront of our Information Security & Privacy work program, collaborating closely with the Data Protection Officer (DPO) and the Compliance Team. Your mission: to ensure unwavering compliance with InHealth Intelligences (IHI) cutting-edge Information Security & Privacy Strategy, data protection legislation, and ISO27001 Certification. Key Responsibilities:
- To coordinate and maintain an accurate and up to date Record of Processing Activities (ROPA) and Information Asset register (IAR).
- To assist with the provision of information security and data protection training as well as regular communications for all internal and where necessary external stakeholders.
- To assist with IHIs annual Data Security and Protection Toolkit.
- To assist with reviewing, publishing, updating and monitoring IHIs Privacy Notices to satisfy data processing requirements for all data subjects.
- To create reports for any associated data protection risks and work with applicable stakeholders internally and externally to ensure that actions are in place to mitigate them.To be responsible for monitoring and progressing emails within the Data Protection Officer mailbox.
- To provide advice and assistance to all key internal and external stakeholders in relation to any data protection related matter.
- To support and assist with regular reviews of IHIs Information Security & Privacy policies, procedures and other formal documents which contain requirements for compliance with the data protection legislation and also ISO27001 and ISO9001.
- Assist the DPO and Compliance Team with internal and external data protection audits including contributing to the maintenance of our ISO27001 and ISO9001 Certifications.
- To create regular, accurate reports to the DPO on all matters relating to data protection.
- To provide updates in the form of KPIs and other agreed metrics from the activities that are related to the fulfilment of the role.
- Any other duties as requested.
Key Experience: - Strong and professional knowledge of data protection legislation (Data Protection Act 2018, UK GDPR, PECR, EU GDPR and any other related data protection laws, national standards and guidance), experience of ISO27001.
- A professional, pragmatic and authoritative approach to support and assist IHI develop and implement the activities and controls needed to ensure information security and data protection legislation compliance, with an ability to clearly communicate the rationale and justification for each proposal.
- Able to communicate effectively at all levels both in writing and orally: including the delivery of engaging an effective data protection training to all levels of personnel and contractors.
- To have, maintain and develop detailed and expert knowledge of current data protection legislation and interpret it to internal and external stakeholders when providing advice and assistance.
- To have previous experience of supporting the delivery of a successful data protection programme.
Other experience:
- Previous working experience of ISO 9001 & ISO 27001 management systems
- Internal Audit Qualifications.
- Data Security and Protection Toolkit.
You will have
- A strong knowledge of Microsoft packages and excellent computer skills.
- Well organised with excellent Administration skills.
- Ability to work effectively within a team.
- A hands-on approach and a willingness to learn.
- Good communication skills whether face-to-face, Microsoft Teams or on the Phone.
- A full UK driving licence and access to own transport as some travel will be required.
Job description
Job responsibilities
Role: Information Governance Officer Location: Middlewich/Hybrid with travel to sites throughout the UK when needed. Salary: 30,000 We are looking for a dedicated, enthusiastic, and self-motivated professional to be not just organized but the driving force behind streamlined operations and elevated service quality As an Information Governance Officer, you will be at the forefront of our Information Security & Privacy work program, collaborating closely with the Data Protection Officer (DPO) and the Compliance Team. Your mission: to ensure unwavering compliance with InHealth Intelligences (IHI) cutting-edge Information Security & Privacy Strategy, data protection legislation, and ISO27001 Certification. Key Responsibilities:
- To coordinate and maintain an accurate and up to date Record of Processing Activities (ROPA) and Information Asset register (IAR).
- To assist with the provision of information security and data protection training as well as regular communications for all internal and where necessary external stakeholders.
- To assist with IHIs annual Data Security and Protection Toolkit.
- To assist with reviewing, publishing, updating and monitoring IHIs Privacy Notices to satisfy data processing requirements for all data subjects.
- To create reports for any associated data protection risks and work with applicable stakeholders internally and externally to ensure that actions are in place to mitigate them.To be responsible for monitoring and progressing emails within the Data Protection Officer mailbox.
- To provide advice and assistance to all key internal and external stakeholders in relation to any data protection related matter.
- To support and assist with regular reviews of IHIs Information Security & Privacy policies, procedures and other formal documents which contain requirements for compliance with the data protection legislation and also ISO27001 and ISO9001.
- Assist the DPO and Compliance Team with internal and external data protection audits including contributing to the maintenance of our ISO27001 and ISO9001 Certifications.
- To create regular, accurate reports to the DPO on all matters relating to data protection.
- To provide updates in the form of KPIs and other agreed metrics from the activities that are related to the fulfilment of the role.
- Any other duties as requested.
Key Experience: - Strong and professional knowledge of data protection legislation (Data Protection Act 2018, UK GDPR, PECR, EU GDPR and any other related data protection laws, national standards and guidance), experience of ISO27001.
- A professional, pragmatic and authoritative approach to support and assist IHI develop and implement the activities and controls needed to ensure information security and data protection legislation compliance, with an ability to clearly communicate the rationale and justification for each proposal.
- Able to communicate effectively at all levels both in writing and orally: including the delivery of engaging an effective data protection training to all levels of personnel and contractors.
- To have, maintain and develop detailed and expert knowledge of current data protection legislation and interpret it to internal and external stakeholders when providing advice and assistance.
- To have previous experience of supporting the delivery of a successful data protection programme.
Other experience:
- Previous working experience of ISO 9001 & ISO 27001 management systems
- Internal Audit Qualifications.
- Data Security and Protection Toolkit.
You will have
- A strong knowledge of Microsoft packages and excellent computer skills.
- Well organised with excellent Administration skills.
- Ability to work effectively within a team.
- A hands-on approach and a willingness to learn.
- Good communication skills whether face-to-face, Microsoft Teams or on the Phone.
- A full UK driving licence and access to own transport as some travel will be required.
Person Specification
Qualifications
Essential
- Please see Job Description
Desirable
- Please see Job Description
Experience
Essential
- Please see Job Description
Desirable
- Please see Job Description
Additional Criteria
Essential
- Please see Job Description
Desirable
- Please see Job Description
Person Specification
Qualifications
Essential
- Please see Job Description
Desirable
- Please see Job Description
Experience
Essential
- Please see Job Description
Desirable
- Please see Job Description
Additional Criteria
Essential
- Please see Job Description
Desirable
- Please see Job Description
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
