Head of Information Governance

We are seeking to recruit a passionate, knowledgeable and dynamic Head of Information Governance

The role will contribute to the Trust senior leadership team and ensure information governance is integrated into the design and implementation of the Trusts clinical and corporate portfolios.

In the context of emerging Integrated Care Systems (ICSs) the post holder will represent the Trust in IG projects relating to data interoperability and digital solutions.

The Information Governance and Records Team provides expert advice and assurance to ensure the Trusts IG function is monitored and managed to the highest standards of best practice and in accordance with our statutory and legislative requirements

We provide mental health and learning disability care for children, young people and adults across Sussex and for children and young people in Hampshire.

**Working in Sussex**:

- Travel easily between coast and countryside, with a blend of picturesque villages and seaside towns there’s always new experiences to be enjoyed
- Embrace the city life with great access to visit Brighton and London
- With easy access to Gatwick and Heathrow and excellent railway links across the UK there is plenty of opportunity for adventure

We’d love you to join our organisation that is rated ‘good’ overall and ‘outstanding’ for caring by the Care Quality Commission. Our staff agree, with 82% of people in our recent staff survey telling us that they recognise that care for patients is our top priority.

**Other key staff survey results include**:

- 70% highlighting flexible working opportunities as a key point for satisfaction at work
- 79% reporting feeling able to make suggestions to improve the work within their team
- 77% identifying the opportunities to show initiative in their roles

See the attached ‘Partnership Perks’ document for details about our benefits package.

Compliance
- To ensure the Trust complies Legislation, national guidance and best practice within information security and the General Data Protection regulation
- To ensure the Data Security Protection Toolkit (DSPT) is completed and submitted on time to the relevant authority, with all supporting evidence available for audit review in a well-structured and organised manner
- To ensure that all Trust staff receive professional advice and guidance around the use and management of Health and Social Care records, Data Protection Act 2018 and ICO.
- To lead on the development and ratification of all IG related policies, procedures and guidance in accordance with the Data Protection Act 2018 and the requirements of the Information Commissioners Office (ICO).
- To ensure that there are effective mechanisms in place for reporting and managing Serious Incidents (SI) which require investigation relating to the information of the organisation. These mechanisms will accommodate operational or procedural improvements arising from lessons learnt
- To ensure privacy by design principles are met across all information and information assets and ensure data privacy impact assessments are assessed and reviewed in line with legislation and best practice.

Information Governance & Security
- To act as a ‘Designated Officer’ in support of the Trust’s Caldicott
- To ensure that identified information threats and vulnerabilities are followed up for risk mitigation, and that perceived or actual information incidents are managed in accordance with national guidance and legislation
- To lead investigations into all suspected breaches of Information Security (outside of the team) and respond appropriately so that action can be taken if necessary, using the Security Architect for any technical guidance
- To work with system partners to develop and implement interagency and internal protocols for information sharing and confidentiality which will enable staff to have current information when required
- To maintain standards of record keeping by encouraging staff to follow procedures, monitoring performance, identifying areas for improvement and reporting performance against standards to the Data Protection Officer
- To produce a regular integrated performance report to the Information Governance and Security Group (IGSAG)
- To work with the Security Architect to ensure that IG requirements are embedded into all IT Systems and digital developments
- To provide written advice to the accounting officer on the content of the Organisation’s Statement of Internal Control in regard to information risk
- To promote good practice by ensuring the development and delivery for the Trust’s Records and Information Governance Training programmes and support staff confidentiality and access rights induction requirements

Health Records
- To lead the Subject Access Request team, ensuring that requests for access to health records under the Data Protection Act 2018 and the Access to Health Records Act 1991 are dealt with, monitoring and reporting on any resulting queries
- T