Data Protection Manager
Job summary
Package Description: Data Protection Manager The Role Behind every safe healthcare service is information that is protected, managed and used responsibly. At IC24, the way we handle information directly impacts patient trust, regulatory compliance and the quality of care we provide. Every data request processed, every information-sharing decision made and every cyber security measure implemented plays a part in keeping our patients, colleagues and organisation safe. We're looking for a Data Protection Manager who understands that information governance is more than compliance - it's about protecting people. This role sits at the centre of how IC24 manages data protection, information governance and information security. You'll work closely with senior leaders, operational teams, clinical colleagues and external partners to ensure we meet our legal, regulatory and organisational responsibilities. You'll lead the operational delivery of data protection and information governance across the organisation, acting as the primary internal lead while working alongside our appointed external Data Protection Officer (DPO). Yo
Main duties of the job
The Data Protection Manager plays a critical role at IC24 by managing data protection, information governance, and information security. This position requires close collaboration with senior leaders, operational teams, clinical colleagues, and external partners to ensure compliance with legal, regulatory, and organisational responsibilities. The manager leads the operational delivery of data protection by overseeing information governance and data protection activities, managing requests and risk, and strengthening information security. The role involves providing expert advice, driving improvement, and ensuring that information is handled securely to support high-quality patient care. Significant experience in data protection, information governance, freedom of information, or cyber security is essential, alongside a recognised qualification or progress towards obtaining one. Strong knowledge of UK GDPR and data protection legislation is necessary, as is the ability to interpret complex legislation and build strong relationships to promote continuous improvement.
About us
Integrated Care 24 (IC24) is a leading not-for-profit social enterprise dedicated to providing innovative and patient-focused primary care services. Committed to improving access to health and social care, IC24 helps reduce the demand on secondary care services by delivering GP-led out-of-hours services, NHS 111, and support services for primary and secondary care across the UK. Serving over 6 million patients, IC24 is focused on delivering high-quality care and ensuring patient safety through effective data management and information security practices. The organisation values brave ideas and individuals, fostering a culture of inclusivity and equal opportunity. IC24 is committed to safeguarding and promoting the welfare of every individual, striving to create an environment where everyone feels they belong and is encouraged to contribute to the overall mission of enhancing healthcare services for the populations served.
Job description
Job responsibilities
Package Description:
Data Protection Manager
The Role
Behind every safe healthcare service is information that is protected, managed and used responsibly.
At IC24, the way we handle information directly impacts patient trust, regulatory compliance and the quality of care we provide. Every data request processed, every information-sharing decision made and every cyber security measure implemented plays a part in keeping our patients, colleagues and organisation safe.
We're looking for a Data Protection Manager who understands that information governance is more than compliance - it's about protecting people.
This role sits at the centre of how IC24 manages data protection, information governance and information security. You'll work closely with senior leaders, operational teams, clinical colleagues and external partners to ensure we meet our legal, regulatory and organisational responsibilities.
You'll lead the operational delivery of data protection and information governance across the organisation, acting as the primary internal lead while working alongside our appointed external Data Protection Officer (DPO). You'll provide expert advice, manage compliance activity and help shape how we respond to an increasingly complex information and cyber security landscape.
This is not just about policies and processes. It's about ensuring information is handled safely, securely and in a way that supports high-quality patient care.
What you'll focus on
Leading data protection and governance You'll oversee information governance and data protection activity across IC24, ensuring compliance with UK GDPR, DSPT and wider regulatory requirements.
Managing requests and risk You'll lead on SARs, FOIs, DPIAs and information sharing arrangements, ensuring requests are handled efficiently and risks are identified early.
Strengthening information security Working closely with IT and security teams, you'll support cyber security initiatives, incident response and organisational awareness.
Providing expert advice You'll act as a trusted advisor to colleagues and senior leaders, helping them navigate complex data protection and information governance matters.
Driving improvement Using audits, reviews and compliance monitoring, you'll identify opportunities to strengthen governance, reduce risk and improve organisational practice.
What matters in this role
You're likely someone who:
- Has significant experience in Data Protection, Information Governance, Freedom of Information or Cyber Security.
- Holds a recognised Data Protection or Information Governance qualification (or is actively working towards one) and keeps up to date with evolving legislation, guidance and best practice.
- Possesses strong knowledge of UK GDPR, data protection legislation and information governance frameworks.
- Has experience working within the NHS, healthcare or another highly regulated environment.
- Can interpret complex legislation and provide practical, outcome-focused advice to colleagues and senior stakeholders.
- Has strong analytical and problem-solving skills, with the ability to assess risk and make sound recommendations.
- Builds strong working relationships and takes a proactive approach to continuous improvement.
Who are we?
We are Integrated Care 24 (IC24), the leading not for profit Social Enterprise providing innovative and patient focused primary care services. IC24 is committed to improving access to health and social care for our patients and reducing the demand on secondary care services. IC24 provides services to over 6 million patients, including GP led out-of-hours services, NHS 111, primary care and secondary care support services.
Location
Ashford Kent
Hybrid working with flexibility based on service need.
What's in it for you?
Annual Salary of £40,000 Opportunity to join the NHS Pension Scheme Additional annual leave above statutory minimum based on service Enhanced family leave (maternity, paternity and adoption leave and pay) Inclusive wellbeing benefits Employee Assistance Programme including free 24/7 independent counselling and occupational health services Professional development opportunities Free membership to our reward and discount platform Access to Blue Light Card and other NHS Discount Schemes
Due to the nature of this position, employment is subject to proof of eligibility to work in the UK, completion of a satisfactory enhanced DBS disclosure and two references.
IC24 is committed to safer recruitment practices, safeguarding children and vulnerable adults, and ensuring all recruitment activity aligns with relevant legislation and guidance.
We celebrate brave ideas and brave people.
careers.ic24.org.uk
We have a duty to safeguard, protect and promote the welfare of those who use our services and our employees. This means we take every step we can to protect from harm, abuse and damage.
We are committed to providing equal opportunities for all and encourage applications from ethnic minorities, those with disabilities, LGBTQ+ communities, neurodiverse individuals, and other under-represented groups. Were dedicated to creating an inclusive environment where everyone feels they belong.
If you need any workplace adjustments during the application or interview process, or have accessibility requirements, please contact the recruitment team.
#LI-LJ1
Person Specification
Qualifications
- Significant experience in Data Protection, Information Governance, Freedom of Information, or Cyber Security. A recognised Data Protection or Information Governance qualification (or actively working towards one). Strong knowledge of UK GDPR, data protection legislation, and information governance frameworks. Experience working within the NHS, healthcare, or another highly regulated environment. Ability to interpret complex legislation and provide practical advice. Strong analytical and problem-solving skills. Builds strong working relationships and takes a proactive approach to continuous improvement.
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Employer details
Employer name
Integrated Care 24 Ltd
Address
IC24
Ashford
TN24 0GP
United Kingdom
Employer's website
https://careers.ic24.org.uk/