Information Governance Manager

Job SummaryThe postholder will lead on all aspects of Information Governance, assume the role of Data Protection Officer and Privacy Officer for the Trust (DPO / PO), be responsible for the Freedom of Information function (FOI), and coordinate the submission of the Data Security and Protection Toolkit (DSPT). Main duties of the job Lead on developing strategy, policy, and guidance to promote and develop 'best practice' as defined by the Data Security and Protection Toolkit and to comply with all relevant legislation. Lead service improvements to the Information Governance service, including manager training, documentation development and process improvement. Act as source of expertise on Information Governance issues, legislation and local policies and procedures. Take responsibility for the management of Freedom of Information requests. Produce and coordinate regular reports for the Information Governance Steering Group, appropriate Digital Services meetings, and the Executive/Trust Boards. Act as the Privacy Officer, receiving and investigating SCR notifications. Act as the Data Protection Officer, providing support, advice and assurance of compliance across the Trust. Ensure the organisation demonstrates compliance with the DPA 2018, GDPR, and FOIA 2000 through annual DSPT submissions. About Us Ashford and St. Peters Hospitals NHS Foundation Trust serves a population of more than 410,000 people in North-West Surrey, parts of Hounslow and beyond. The Trust employs over 3,700 staff across two hospital sites (Ashford, Surrey and St Peter's, Chertsey) and community facilities. We offer NHS benefits/discounts and several on-site facilities, with a focus on professional development and flexible patient care. Benefits (examples) Excellent pension scheme and annual leave entitlement On-site nurseries, staff cafes, and parking Support in career development Salary sacrifice schemes including wage stream, lease cars, Cycle to Work schemes and home electronics Adverts may close early; applicants are encouraged to submit an application as soon as possible. For more information about a career at ASPH please visit www.asph-careers.org. Details Date posted: 14 November 2025 Pay scheme: Agenda for change Band: Band 7 Salary: Depending on experience Contract: Permanent Working pattern: Full-time Reference number: 323-AC8972-SK Job locations: St Peter's Hospital, Chertsey, KT16 0PZ Job Responsibilities Expertise and Advice: Act as a source of expertise on Information Governance to the Trust and provide guidance on Information Protection, FOI, and related areas; support incidents and national reporting as appropriate. Governance Development: Develop and maintain IG policies, records management, security and sharing practices; ensure IG processes meet business requirements. Security and Compliance: Maintain up-to-date knowledge of Data Protection legislation; advise on DPIAs, DSAs, and DPAs; coordinate data protection impact assessments and ICO liaison where required. FOI and Privacy: Manage FOI requests and provide guidance on exemptions; act as Privacy Officer for SCR notifications and privacy notices. Reporting and Audits: Manage DSPT submission, attend IG Steering Group meetings, coordinate statutory/external audits, and produce annual IG report. Leadership and Managerial Assume the role of Data Protection Officer, reporting to the Trust Board; provide expert advice, ensure compliance, and support data protection initiatives including DPIAs, DSAs, and DPAs. Be the Privacy Officer and lead on Caldicott Assurance Plan; maintain information governance responsibilities and accountability across the Trust. Reporting Manage the DSPT within the Trust, control user access, and coordinate evidence for submission; report risks and incidents to the IG Steering Group; coordinate audits. Service Improvement and Training Deliver the Information Governance Improvement/Action Plan; coordinate the annual audit; develop training programmes for managers and staff; develop governance documentation and SOPs. Communications and Engagement Collaborate with colleagues in partner organisations to ensure IG coverage; maintain the IG sections of intranet/internet; manage IG mailboxes. General Responsibilities Support the department and organisation with other duties reasonably within the scope of the role. Person Specification Essential – QualificationsDegree in a related information subject or evidence of professional training or equivalent experience. Essential – ExperienceGood understanding of the NHS Information Governance agenda and toolkit. Desirable – ExperienceExperience of working within the NHS. Knowledge – EssentialWorking knowledge of the Data Security and Protection Toolkit, DPA 2018, GDPR and FOIA 2000. Disclosure and Barring Service Check: This post is subject to the Rehabilitation of Offenders Act; a DBS submission is required. Employer details Ashford & St. Peter's Hospitals NHS Foundation Trust, St Peter's Hospital, Chertsey, KT16 0PZ. Website: https://www.ashfordstpeters.nhs.uk/ #J-18808-Ljbffr