Information Governance Officer
Job summary
The post holder is responsible for supporting compliance with UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025, Common Law Duty of Confidentiality, Freedom of Information legislation, NHS Records Management requirements, National Data Opt-Out requirements, cyber security and data security requirements, and associated NHS England standards.
Act as support to the operational lead and facilitator for the implementation of Information Governance within the Trust, ensuring compliance with initiatives and meeting legislative obligations, including NHS standards for data protection, patient confidentiality, Freedom of Information, information governance management, information security, information quality assurance, corporate records management, cyber security and data security requirements, and artificial intelligence governance and assurance.
Main duties of the job
The post holder will support the delivery of the Trust's Information Governance service, with a particular focus on managing Freedom of Information requests, maintaining key IG records and registers, supporting Data Security and Protection Toolkit evidence, and contributing to wider IG work programmes including records management, ROPA maintenance, DPIA reviews, data sharing agreement requirements, breach investigations and subject access request support.
About us
Maidstone and Tunbridge Wells NHS Trust is one of the best performing hospital trusts in England. We are regularly in the top five for emergency department performance and offer some of the fastest access to cancer treatment in the country.
We are a large acute hospital trust in south-east England, providing general hospital services and specialist care to around 600,000 residents in west Kent and East Sussex. With a dedicated and diverse team of over 7,000 staff we provide specialist cancer services to over two million people through the Kent Oncology Centre.
We operate from three main clinical sites: Maidstone Hospital, Tunbridge Wells Hospital and Fordcombe Hospital, and provide outpatient clinics across Kent and East Sussex.
Looking for flexible working? We are a flexible working-friendly organisation. Whether it's adjusting your hours or exploring other flexible arrangements, we want to work with you to find the best solution for you, our patients, and the Trust. Talk to us about how we can accommodate your working needs.
Click here to hear what our staff say.
Joining us includes a comprehensive benefits package:
- At least 27 days of annual leave plus public/bank holidays (pro-rata for part-time staff).
- Membership in the NHS Pension Scheme, with a 20.6% employer contribution and life assurance benefits
- Blue Light card eligibility
- And more, additional benefits can be found in the benefits documents below
Job description
Job responsibilities
Weve provided all the details you need about this role in the job description and person specification. Please take a moment to review the criteria in the person specification and share specific examples in your application that demonstrate how you meet these requirements. Please also check your application for errors/omissions prior to submission.
Please note that appointment to this post will be subject to a satisfactory Disclosure and Barring Service Check at Standard Level. (Enhanced level now includes regulated checks against vulnerable adults and children). If a role involves regulated activity and requires a DBS check with a barred list check, you cannot apply if you are on the barred list.
All successful applicants will be required to complete our corporate trust induction once a start date has been agreed.
Please note: This role is not eligible for UK Visa Sponsorship. In line with the UK Immigration Rules and Home Office Sponsorship Guidance, employers may only sponsor individuals for roles that meet strict eligibility, salary, and compliance requirements. Where a role does not meet these criteria, organisations are prohibited from assigning a Certificate of Sponsorship. Applicants must therefore already hold a valid immigration status and ongoing right to work in the UK in order to be considered.
Person Specification
Qualifications
- oEducated to degree level or equivalent training and experience within Information Governance, Data Protection, FOI, Records Management or a related governance field. (e.g Practitioner Qualification or equivalent)
Experience/Knowledge
- oKnowledge of NHS Information Governance, Caldicott requirements, patient confidentiality, UK GDPR, Data Protection Act 2018, Data (Use and Access) Act 2025, Common Law Duty of Confidentiality, Freedom of Information Act 2000, Environmental Information Regulations, NHS DSPT, NHS Records Management Code of Practice, Data Protection Impact Assessments and Information Sharing Agreements.
- oKnowledge of Data Subject Rights and Subject Access Request processes under UK GDPR and Data Protection Act 2018
- oKnowledge of cyber security and data security requirements relevant to NHS organisations, including information risk management and appropriate technical and organisational controls.
- oExperience supporting data subject rights requests, FOIA/EIR requests, information governance incidents, DPIAs, information sharing governance and DSPT evidence collation.
- oPrevious experience providing and analysing simple statistical reports
- oPrevious experience working with FOI requests
- oGood understanding of Information Governance within an NHS context
- oWorking knowledge of healthcare services
Skills
- oEfficient and defined organisational skills
- oExcellent oral, written communication and presentation skills.
- oAbility to analyse and review documentation content, and the use of own judgement in the selection of appropriate wording Able to use own initiative and to prioritise,
- oAbility to work effectively, independently, or as part of a team
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Employer details
Employer name
Maidstone and Tunbridge Wells NHS Trust
Address
Maidstone Hospital
Hermitage Lane
Maidstone
ME169QQ
United Kingdom
Employer's website
https://www.mtw.nhs.uk/