Senior IG Officer

Independently manage and process highly complex information requests, including Subject Access Requests (SARs) from members of the public, Trust staff, solicitors and patients, involving sensitive information.

Oversee and quality-assure complex Freedom of Information (FOI) requests, ensuring responses from clinical directorates comply with statutory deadlines.

Support the annual completion and evidence-gathering process for the NHS Data Security and Protection Toolkit (DSPT), taking part in collection and indexing of the required evidence.

Participate in investigations into complex data security incidents and confidentiality breaches reported via the Trust's incident management system (Datix).

Act as an internal source of knowledge to clinical directorates, research teams, and administrative managers, responding to queries with clear and practical advice on GDPR, the Data Protection Act 2018, and Caldicott Principles.

Facilitate and review Data Protection Impact Assessments (DPIAs) for high-risk projects, including artificial intelligence (AI) clinical tools, cloud migrations, and research trials.

Assist with investigations into complaints regarding data protection breaches, or with internal reviews of FOI complaints. Liaise with the Patient Advice and Liaison Service (PALS) to support this complaints process where needed.

Please view the attached Job Description and Person Specification documents for full details regarding this post.
When completing your application please ensure that you clearly demonstrate how you meet the role criteria.

Please view the attached Job Description and Person Specification documents for full details regarding this post.

When completing your application please ensure that you clearly demonstrate how you meet the role criteria.

Essential criteria
- Expert knowledge of information governance and data protection acquired through qualification to graduate degree level, or equivalent relevant experience.
- Significant experience of working in an Information Governance role.
- Experience working within an NHS organisation or similar public body, preferably an acute Trust.
- Experience of writing key information governance documents, including policies and procedures, data protection impact assessments, privacy notices, etc. Ability to tailor such documents to the specific audience.
- Experience in conducting IG related research in order to perform role, such as locating and interpreting relevant national guidance or legislation.
- Preparation of Freedom of Information Act and/or Subject Access Request responses with practical experience of the exemptions, the public interest and prejudice tests, collaborating with colleagues to finalise responses.
- Expert knowledge of GDPR, Data Protection Act 2018, Freedom of Information Act 2000, and awareness of other relevant legislation such as the Access to Health Records Act 1990.
- Knowledge of the SIRO role, its responsibilities, the inter- relationship with Information Security, Cyber Security, Information Governance and Information Assets and their Owners.
- An awareness of the NHS research process as well as the role of completing DPIAs as part of innovative or otherwise high-risk projects.
- Ability to translate complex information, including legislative details, into accessible, practical language.
- Ability to appropriately challenge and negotiate with senior members of staff where required.
- Able to work under pressure and to deadlines.
- Excellent verbal and written communication skills, with the ability to communicate effectively at all levels.
- Recognition of own personal boundaries and when to refer matters to others/senior colleagues.
- Able to manage time and priorities appropriately, operating on own initiative towards agreed objectives.
- Positive attitude towards learning and development, demonstrated by a record of continuing professional development.

Desirable criteria
- Post-graduate level qualification in a relevant discipline, or equivalent working experience.
- Professional qualification in data protection (e. g. BCS, ISEB or CIPP/E).
- Relevant accredited qualification such as BCS Practitioner Certificate in Freedom of Information.
- Preparing and coordinating evidence for the annual Data Security & Protection Toolkit submission.
- Experience in assisting and supporting colleagues with urgent response activities such a personal data breach response and urgent project / programme issues.
- Assisting in the investigation of IG incidents in line with NHS, ICO and UK GDPR requirements.
- Familiarity with document redaction using specialised software.
- Understanding of the specific structure and data challenges within a multi-site NHS Trust.
- An awareness of cyber security with some knowledge of data security frameworks e. g. Cyber Essentials, ISO 27001.

- You will be working for an organisation which values and respects all of its staff and the community it serves. The Trust is a leader in the NHS and research sectors and provides excellent benefits for its employees. This includes commitments to professional development but also many policies to support employees in balancing their personal and professional lives.
- Flexible working,