Data Protection and Information Governance Manager

University Hospitals Bristol NHS Foundation Trust; Bristol; On-site; GBP 55,000 - 63,000; Full time

Job summary

A leading NHS Trust in Bristol seeks a Data Protection and Information Governance Manager to oversee compliance with complex data protection laws and provide expert advice. In this full-time role, you will act as a Data Protection Officer and guide both clients and staff. You should possess or be working towards a recognized professional qualification in information governance. The position offers a competitive salary and promotes a healthy work-life balance.

Benefits

Support for health and wellbeing

Training and career development

Qualifications

• In-depth knowledge of UK GDPR and the Data Protection Act 2018.
• Experience in digital audit or compliance inspections.
• Ability to support clients with legal obligations.

Responsibilities

• Manage delivery of Data Security and Protection Toolkit.
• Act as Data Protection Officer for multiple clients.
• Lead annual DSPT audits and compliance inspections.

Skills

Data protection legislation understanding

Information governance expertise

Client management

Technical knowledge of information governance

Education

Specialized digital/IG professional qualification (CIPP/E or CIPM)

Degree or equivalent in related field

Job description

Data Protection and Information Governance Manager

Band 8a

Main area Digital Assurance Grade Band 8a Contract Permanent Hours Full time - 37.5 hours per week Job ref 387-TS7410-LMG

Site Regional Town Bristol Salary £55,690 - £62,682 pa Salary period Yearly Closing 31/12/2025 23:59

As an organisation we recognise the value of a healthy work-life balance. When applying, speak to us about how we might be able to accommodate flexible working, so your work life fits around your home life.

We particularly welcome applications from Black, Asian and minority ethnic candidates as they are under-represented within the Trust.

Generative artificial intelligence (AI) describes algorithms that can be used to produce new content, including audio, code, images, text, simulations, and videos. It is developing all the time and is now being used as a support mechanism for all kinds of content-based creations. Please note the use of AI is monitored and if applicants have used it then they are required to declare this.

Job overview

The postholder will be a subject matter expert and have in-depth specialised knowledge and experience in information governance and data protection.

In their client-facing role they will:

• Support clients, individually, at place and at system level, to ensure that they meet highly complex legal and regulatory obligations in relation to Information Governance including confidentiality, information security, Data Protection, Freedom of Information and GDPR.
• Act as Data Protection Officer to a range of clients to whom this service is provided.
• Act as a trusted advisor and subject matter expert on data protection and information governance to cross community programmes.

The postholder will also have an internal role to support the Associate Director of Digital Audit and Assurance Services and wider ASW Assurance Senior Management Team (SMT) to develop and maintain a robust information governance framework and guide and train staff to ensure ASW Assurance maintains data protection and privacy standards.

The postholder will manage the delivery of mandated annual Data Security and Protection Toolkit to all ASW Assurance clients, and seek to grow this offering through networking and marketing the ASW IG and DP service offerings.

Main duties of the job

General:

Have a strong technical understanding on all relevant data protection and information governance guidance, regulation, and legislation.

Maintain a high level of recognised subject matter expertise in information governance issues through research, liaison with information governance colleagues in other NHS, public and third sector organisations, and membership of national information governance groups.

Client facing:

Provide expert data protection and information governance legislation and regulation support to clients through knowledge and practical subject matter expertise to define, scope and deliver ASW services based on highly complex client needs and technical digital programmes.

Support clients in understanding best practice through horizon scanning, interpretation, and communication of complex legislation and regulation.

Lead the delivery of annual DSPT audits.

Internal:

Ensure that ASW meets its highly complex legal and regulatory obligations in relation to information governance including confidentiality, information security, Data Protection, Freedom of Information, GDPR and Registration Authority requirements.

Staff supervision, training and development.

Provide expert insight into, agreeing, monitoring, and reviewing data sharing or data processing agreements/contracts governing processing of patient-identifiable information.

Working for our organisation

University Hospitals Bristol and Weston NHS Foundation Trust (UHBW) is one of the largest acute Trusts in the country, bringing together a combined workforce of over 13,000 staff and over 100 different clinical services across 10 different sites, serving a core population of more than 500,000 people across South West England. UHBW has been rated by the CQC as ‘Good’ overall and our staff are proud to deliver excellent care to the people of Bristol, Weston and beyond. As a forward- thinking multi-award winning Trust and a digital exemplar committed to improving patient care, our world-leading research and innovations are having a positive local and global impact. Our hospitals are spread across Bristol and Weston, join us and you can enjoy the very best of both worlds; city living within a stone’s throw of the countryside or beside the seaside, both with easy access to all that the South West has to offer. UHBW is committed to safeguarding and promoting the welfare of children, young people and vulnerable adults. As an equal opportunities employer actively working towards a diverse workforce we aim to recruit and retain a workforce which represents the rich diversity of the local population at all levels and are committed to designing our services around the needs of individual patients and those around them. Anonymous information will be used from your application in order to ensure we’re meeting our pledge.

Detailed job description and main responsibilities

Please refer to the full job description and personal specification that are attached to this job advert.

Person specification

Qualifications

• Possess or actively working towards specialised digital/IG professional qualification e.g. CIPP/E or CIPM
• In depth specialist knowledge of data protection and information governance acquired through degree or equivalent level plus knowledge.

Knowledge

• In-depth knowledge and understanding of data protection legislation, including the Caldicott Principles, UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Privacy and Electronic Communications Regulations (PECR), with the ability to ensure organisational compliance and advise on legal obligations.
• Must have a full and mature understanding of NHS and public sector structures, policy, functions, digital and information systems together with the aptitude to build on that knowledge.

Experience

• Expert experience of digital audit, or experience in digital delivery and/or management at a senior level.
• Experience managing IG audits or compliance inspections (e.g. ICO reviews), including conduct IG audits.

Experience

• Experience of supervising, training and coaching staff.
• Experience of preparing reports for Boards and Committees to a high standard.

We hope that you will decide to join us and become part of this exciting journey, helping us to shape our future together.

• As an equal opportunities employer actively working towards a diverse workforce we aim to recruit and retain a workforce which represents the rich diversity of the local population at all levels and are committed to designing our services around the needs of individual patients and those around them. Anonymous information will be used from your application to ensure we’re meeting our pledge.
• The Trust is committed to investing in and caring for all our staff. We will support you in maintaining and improving your health and wellbeing, as well as your career development through management and training support - developing exceptional people for exceptional careers.
• UHBW is committed to safeguarding and promoting the welfare of children, young people, and vulnerable adults.
• To comply with Part 7 of the Immigration Act 2016 all applicants must be able to speak fluent English to an appropriate standard which will be assessed at Interview.
• If you require sponsorship for a visa to work in the UK, to avoid disappointment, please check to ensure you are eligible under the UKVI points based system.
• The Trust uses electronic new starter forms on Trac to collect personal details. Information collected is securely stored and used to set up the employee record on the ESR HR system.
• By applying for this post, you are agreeing to University Hospitals Bristol and Weston NHS Foundation Trust transferring the information contained in this application to its preferred applicant management system. If you are offered a job, information will also be transferred into the national NHS Electronic Staff Records system.
• Please be aware of scams – unless specified above, we will only communicate with you via @recruit.trac.jobs or nhs.net e-mails and we will never ask you for any payments.

IMPORTANT:

Please note that if you apply for a position with this Trust, you may be contacted via Trac or via email. This includes invites for job interviews. We therefore recommend that you regularly check your Trac account and email accounts. We may also contact you by texting the mobile number, if provided, on the application form.

Due to the high number of applications that are received for some posts we may close this vacancy before the advertised closing date. Therefore, please apply for this post as soon as you can, if you are interested and you meet the requirements of the Person Specification.

Only those candidates who clearly demonstrate how they meet the person specification will be shortlisted for this job.

As a guide interviews should usually take place within 3 weeks of the closing date.

When providing employment reference details, please provide correct work-related email addresses so references can be sought promptly when we are looking to progress your application. Your referee must all be known to you in a line manager or professional lead capacity.

Employer certification / accreditation badges

You must have appropriate UK professional registration.

Name Vickie Gould Job title Deputy Director of Audit and Assurances Services Email address [e-mail]