Deputy Director, Data Protection Officer

Deputy Head of Information Security & DPO Nottingham University Hospitals NHS Trusts
Are you experienced in the world of data protection and security?
At University Nottingham University Hospitals NHS Trust, we have a fantastic opportunity for you to become a Deputy to our Data Protection Officer within our exciting Information Governance team. Data Protection and Security / Information Governance is a requirement of every UK organisation ensuring that you are entering a career in an area of continued demand and expertise.
In return this role can offer you a fantastic opportunity for you to learn, grow and develop whilst using your leadership abilities.
You will be the Deputy to the Data Protection Officer and work closely with people at all levels, joining at an exciting time where there is lots of change to deliver the Trusts strategy of People First. You will be dynamic, enthusiastic and approachable and the ability to be able to evidence success in a senior manager position within a complex health care environment is essential.
Data Protection
~(Data Protection Impact Assessments, Data Sharing / Processing Agreements and Information Asset Management)
~ Data Requests
~(Data Breaches
~(Data incidents breaches of the Confidentiality, Integrity and Availability (CIA) triad of Information Assets)

~ Data Security
~(NHS Data Security and Protection Toolkit / Regulatory compliance)


With over 20,000 staff, we are one of the biggest employers in the city with a central role in supporting the health and wellbeing of our local population. We play a leading role in research, education and innovation.
We are big believers in diversity and welcome new ideas to help develop our team in order to deliver world class healthcare to the vast patient populations we serve. With endless personal development opportunities available, at NUH we will endeavour to turn your job into a career
Training & Qualifications
Completed Data Protection Officer practitioner, or equivalent, training
Evidence of and continuing professional development
Experience and knowledge in Data Protection & Security and in interpretation and applications of legislation in a large public acting organisation
Relevant Data Protection, Cyber Security and Information Technology qualifications. Specific expert Data Protection and / Freedom of Information legislation practitioner) (Specialist knowledge in relation to Data Protection and Security) (Data / Information Security / Cyber Security Qualification
Expert knowledge of the Data Protection Act and Freedom of Information Legislation
Must be willing to participate in any relevant training to develop skills required to carry out duties
Evidence of continuing professional development in relevant area (s) (Records Management, Data Retention, Data Protection, Handling Information)
Data Security / Information Security Qualification
Certified Information Systems Security Professional (CISSP)
Formal management/leadership training/qualification
Significant operational management experience in leading a team in a highly demanding and complex organisation as a leader
Extensive experience in a similar position or in a senior information governance role within the NHS
Experience of the NHS Data Security & Protection Toolkit
Comprehensive knowledge of information governance, data protection legislation / best practice
Experience of leading the development and/or implementation of an information governance framework within a complex, multi-site organisation
Strong track record of successful delivery of performance standards in a challenging environment
Previously responsible for a budget, involved in budget setting and working knowledge of financial processes
Caldicott Guardian role, Senior Information Risk Owner role, Confidentiality, Integrity and Availability and Data Security & Protection Toolkit requirements etc.
Highly developed knowledge and understanding if Data / Cyber / Information Security requirements within an NHS environment
Expert knowledge of Data Protection Act (DPA) 2018 (UK GDPR) /, Freedom of Information Act (FOIA) 2000, Access to Health Records Act (ATHR) 1990, Network & Information Systems (MIS) Regulations 2018, Computer Misuse Act 1990 and any other relevant legislation
Expert level of experience managing Data Protection enquiries and issues
Knowledge of Data / Security / Cyber Security Frameworks
Knowledge and experience of supporting and completing all types of Contracts, Service Level Agreements (SLAs) and relevant Information Sharing / Data Processing Agreements alongside procurement due diligence requirements. Such as the Digital Technology Assessment Criteria (DATC)
Knowledge, experience and practical application of data privacy impact assessments as set out within legislation above
Knowledge, experience and practical applications of Data Breaches / Incidents in line with the Confidentiality, Integrity and Availability (CIA) Triad. As well as reporting to relevant commissioning bodies as set out within legislation
Specialist knowledge of NHS and statutory polices and regulations including UK GDPR, Data Protection Bill, Caldicott Principals
Knowledge and understanding of the importance of confidentiality, Data Protection / Information Governance and security policies
Knowledge of Acute Hospital Services and the way in which data is used Experience of working in a support role
Experience of working in an Data Protection / Information Governance department
Senior level role within an NHS service / department / division
Experience of working with National organisations such as the Local Authorities, Department of Health (DoH)
Experience Integrated Care Boards (ICB), NHS England and National Cyber Security Centre (NCSC)
Experience of managing a demanding and expanding service creatively and efficient in an agile manner
Awareness of corporate and records management requirements
Reporting to the Information Commissioner's Office (ICO) / Ombudsman.
Staff data on training, skills and competencies.
Ability to work with and influence senior colleagues including negotiation and persuasion skills
Expert level of experience managing Data Protection enquiries and issues
Experience of writing policies and procedures
Excellent presentation and training skills
Self- motivated and able to encourage others at all levels including senior management
Competent IT skills in order to collect and interpret data, present reports and compile simple presentations
Flexible approach to meet the conflicting demands of the job
Effective time management skills in order to meet deadlines
regards people as individuals and appreciates the value of diversity in the workplace
Planning and organisation skills
Leadership / Supervisory / Line Management skills
Able to work as part of a team, co-operating to work together and in conjunction with others and willing to help and assist wherever possible and appropriate
flexible and adaptable, willing to change and accept change and to explore new ways of doing things and approaches
Excellent planning and organisational skills
Standard office environment requirements

Strong visible leadership and coaching style provided onsite and online
Ability and willingness to adopt an agile approach to work
Willingness and ability to travel between sites and to external meetings
Nottingham University Hospitals NHS Trusts
Full-time,Flexible working,Home or remote working
#