Job overview
We are recruiting for an Information Governance Specialist who shares our vision to be trusted to provide consistently outstanding care and exemplary service to our patients.
The post holder will support the Head of cyber security and information governance in reviewing and implementing the Trusts IG Strategy and improvement program ensuring the Trust meets with all the statutory and regulatory requirements for information governance. The role will lead on ensuring the requirements of the Data Security and Protection toolkit are met. Provide leadership and expert advice on information governance across the Trust on information governance. Data protection, GDPR and on developing new and innovation approaches, ensuring compliance with all the relevant legal and regulatory framework
Our Values are Include, Respect and Improve. It is important that you understand and refer to our values during your recruitment process and beyond!
Main duties of the job
Support Data Protection Officer (DPO) the development and implementation of the Trust’s Information Governance Strategy, policies and delivery of the associated work programme to meet statutory, regulatory and legislative requirements, national/local policies and best practice.
Interpret the requirements of the Data Security and Protection Toolkit, develop and lead an improvement plan, liaising with the identified leads to ensure the organisation meets with the requirements and has the supporting evidence internal and external inspection.
Lead and ensure the timely completion of the annual Data Security and Protection Toolkit, and take the lead on specific measures, in order to gain internal authorisation prior to submission in line with the national deadlines.
Identify risks across the Trust in relation to information governance, ensure actions taken to mitigate the risks and escalated as appropriate and maintain an Information Governance Risk Register.
Support the DPO and interpret the legislation and national guidance in relation to Information Governance and make recommendations to ensure that the Trusts meets the requirements.
Detailed job description and main responsibilities
Please see the attached Job Description and Person Specification information pack for further detailed information regarding this role.
Person specification
Skills
Essential
- Excellent communication skills; written and verbal
- High level of interpersonal skills to include negotiating and influencing to respond to public, patients, staff and external stakeholders
- Problem solving approach
- Good IT and computer skills inc. use of Microsoft office
Knowledge
Essential
- Detailed knowledge and application of information governance legislation & policy such as GDPR, Data Protection Act 2018, the Information Commissioner’s Office (ICO) and the Freedom of Information Act 2000
- NHSE Data Security and Protection Toolkit • Data Breach Logging • Annual Audit
- Management of Subject Access Request’s to include data redactions
- Management of Data Protection Impact Assessments • Provision of guidance to both staff and suppliers • Review and approval
Other Requirements
Desirable
- Experience and evidence of engagement around equality, diversity and inclusion issues in relation to policy, service development and service delivery in respect of both services to users and the management of staff
- Role model our Trust values every day
- NHSE Records Management Code of Practice
- The Eight Caldicott Principles
Previous Experience
Essential
- Detailed knowledge of information governance and data protection legislation, duties and responsibilities.
- Experience of Information Governance management and compliance within a large organisation – preferably the NHS.
Desirable
- Experience of working in Health care setting with multi-professional healthcare teams.
- Project Management experience.
Qualifications / Training
Essential
- Educated to degree level or equivalent experience
- Relevant experience in information governance
Desirable
- Evidence of ongoing career/professional development.
- Qualifications in information governance, records management, data protection and information security.
WhatsApp job alerts
Get instant WhatsApp alerts for Band 7 Administrative and IT roles in Stevenage
Create your Job Clerk account first. We'll collect your alert preferences during onboarding and help you turn on WhatsApp notifications for matching healthcare roles.
Applying for this NHS job
This advert is for Information Governance Specialist with East and North Hertfordshire Teaching NHS Trust in Lister Hospital, England. It is listed as a Band 7 Administrative and IT role. The advertised salary is £49,387 - £56,515 per annum. The contract type is Permanent. The application deadline is 08 Sep 2026.
Before you apply, compare the job description with the person specification and mirror the employer's essential criteria in your supporting information. Use the vacancy title, employer, location, salary, contract type, closing date and posted date (25 Aug 2026) to decide whether this role fits your current NHS job search. If the employer can close applications early, prepare the application before the stated deadline rather than waiting for the final day.
For more context, review related Job Clerk pages for the same profession, band or location where they exist, then use the application-support guides to tailor your statement and prepare for interview.