Principal Data Protection & Information Governance Specialist

NHS; Liverpool; On-site; GBP 61,000; Full time

Job description

Principal Data Protection & Information Governance Specialist

Liverpool University Hospitals NHS Foundation Trust

We are looking for enthusiastic DP and IG Specialist to join our successful Solutions team working across Cheshire & Merseyside and the surrounding areas. The successful candidate will be based in our Liverpool office.

As a DP and IG Specialist (Band 8A) you will be earning up to £60,504 all within a flexible working environment.

In their client-facing role they will provide support to existing NHS and Public Sector MIAA clients, individually, at place and at system level, to ensure that they meet highly complex legal and regulatory obligations in relation to Information Governance including confidentiality, information security, Data Protection, Freedom of Information and GDPR.

Additionally, the post holder will have internal DP and IG responsibilities to MIAA and its staff. We want driven people who think creatively about their work, embrace challenges and can resolve complex problems.

Main duties of the job

The post holder will be a subject matter expert and have an in-depth specialised knowledge and experience in information governance and data protection.

In their client-facing role, they will:

• support clients, individually, at place and at system level, to ensure that they meet highly complex legal and regulatory obligations in relation to Information Governance including confidentiality, information security, Data Protection, Freedom of Information and GDPR.
• Provide support to, and deputise for, the MIAA - provided Data Protection Officer to a range of clients.
• Provide interim expert IG support to clients as required.

Additionally, the post holder will have internal responsibilities including:

• monitoring policies, systems and processes to ensure effective compliance with complex regulatory and legal obligations, supporting the maintenance of certification to relevant Data Protection Privacy standards, monitoring and reporting upon compliance with complex standards and certifications and coordinating the organisation's processes for Subject Access-Requests, or applications under the Freedom of Information Act.

About us

MIAA is an NHS Shared service, hosted by Liverpool University Hospitals NHS Foundation Trust. MIAA is the predominant provider of internal audit services to over 50+ NHS and public sector organisations in the Northwest and beyond. MIAA offers clients a number of services in addition to internal audit including Solutions: Information Governance, Anti-Fraud, Technical Risk Assurance, Capital, Clinical Coding and Healthcare Quality.

MIAA's budgeted turnover is 12 million, which is demonstrative of the organisation's ambitious and strategic goals.

We pride ourselves in promoting equality and valuing diversity.

Our values are:

• Trust
• Respect & Compassion

Job responsibilities

Maintain a high level of subject matter expertise in information governance issues, through research, liaison with information governance colleagues in other NHS organisations and attendance at national information governance meetings.

Have a strong technical understanding on all relevant data protection and information governance guidance, regulation and legislation.

Establish presence on, and reputation as a subject matter expert with, relevant external bodies influencing policy.

Have excellent influence, written and oral communication, and negotiation skills; being comfortable presenting information on detailed and complex technical subjects to both individuals and groups not familiar with the subject matter.

Provide expert data protection and information governance legislation and regulation knowledge and practical expertise to define, scope and deliver MIAA audit and advisory services.

Through allocated assignments and services, support clients to meet their legal and regulatory obligations in relation to Information Governance including confidentiality, information security, Data Protection, Freedom of Information and GDPR through expert advice and guidance and demonstrable knowledge and experience.

Support clients in building robust, complex, information governance frameworks.

Work across organisational boundaries, liaising with senior managerial and clinical staff at local, place and system level.

For a full list of duties, please refer to the attached job description.

Person Specification

Qualifications

• BCS/ISEB Practitioner certificate in Data Protection
• Certified Data Protection Officer
• Relevant qualification/accreditation in the provision of training

Experience

• 'Hands on' experience of implementing and assuring data protection and information governance processes and methodologies
• Must have senior experience of working in audit and consultancy or within a senior role in digital delivery.
• Must have significant demonstrable PQE plus self certified CPD
• Must have experience of working in the NHS or other public sector organization resulting in a developed understanding of digital systems, risks, and processes. Alternative experience in an equivalent organization may be acceptable.
• Experience of operating at Board level, presenting to Audit Committee, and influencing Executive and Non-Executive Directors
• Must have significant experience of recruiting, developing, managing, and supervising staff

Knowledge

• Must have a full and mature understanding of NHS and public sector structures, policy, functions, and digital systems together with the aptitude to build on that knowledge.
• Must have a full understanding of the digital agenda, corporate governance, risk management and assurance principles and practice, data protection and information governance
• Specific technical knowledge including: - The NHS Data Protection and Security - NHS, government, and local government data protection strategies, - Data Protection and GDPR legislation - Freedom of Information legislation

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.

Liverpool University Hospitals NHS Foundation Trust

Address

One of MIAA Office Locations

Head of Data Protection & Information Governance