Job summary
Are you an experienced Information Governance professional with a strong background in audit, compliance, and risk assurance?
BPAS is seeking an Information Governance Assurance Officer to operate as an independent assurance function within our Information Governance team. This role provides confidence to the Data Protection Officer (DPO), Senior Information Risk Owner (SIRO), and senior leadership that Information Governance controls are effective, risks are managed, and compliance obligations are being met.
The postholder will play a central role in validating controls, monitoring incident remediation, and assuring evidence for the NHS Data Security and Protection Toolkit (DSPT), CQC inspections, and UK GDPR compliance.
About you:
We are looking for a confident and analytical Information Governance professional with experience in compliance monitoring, audit, or assuranceideally within a healthcare or NHS-aligned environment.
You will have strong knowledge of UK GDPR, the Data Protection Act 2018, and the NHS Data Security and Protection Toolkit. Youll be comfortable interpreting policy requirements, assessing control effectiveness, and providing constructive challenge where improvements are needed.
Main duties of the job
- Design and deliver an annual Information Governance internal audit and compliance programme
-
Conduct audits and spot checks on DPIAs, DSAs/DPAs, RoPA entries, incident logs, retention compliance, and policy adherence
-
Monitor mandatory Information Governance training compliance and SOP adherence
Produce quarterly IG dashboards and compliance reports
-
Monitor DSPT metrics and key indicators such as breach trends and training rates
-
Contribute assurance reporting to the IG Board and support inspection readiness
Support maintenance of the IG Risk Register and corporate risk entries
-
Provide assurance on mitigation progress and escalation criteria to the DPO and SIRO
-
Coordinate the annual Information Asset Owner (IAO) review cycle
About us
The British Pregnancy Advisory Service (BPAS) is the UK's largest independent reproductive healthcare charity, providing evidence-based, not-for-profit reproductive healthcare. We work mainly on behalf of the NHS, offering abortion care, contraception, and STI testing and treatment across the country.
When you join BPAS, you become part of a values-driven organisation where compassion, professionalism, and choice guide everything we do. You will help remove barriers to safe reproductive care while supporting people to make informed choices about their health and futures.
Working with us - benefits include:
- 34 days annual leave (including bank holidays)
- Life assurance at 3 salary
- Defined contribution pension scheme
- Access to GP 24/7, 365 days a year
- MyMindPal mental fitness app and 24/7 counselling support
- Online discounts, discounted gym membership, and other lifestyle benefits
- Family-friendly policies to support work-life balance
Safeguarding, Equality & Diversity
BPAS is committed to safeguarding and promoting the welfare of everyone who uses our services, and all staff share this responsibility. Recruitment follows safer-recruitment principles and includes appropriate pre-employment checks.
We actively welcome applications from people of all backgrounds, identities, and experiences. We are proud to be an inclusive employer and will make reasonable adjustments to ensure a fair and accessible recruitment process for all candidates.
Job description
Job responsibilities
The full job description can be found on the right hand side in the supporting documents, which is available for you to download and review.
Further Information
We may close this advert early if we receive a high number of suitable applications, although we aim to keep it open long enough to ensure a diverse and representative applicant pool.
If you have any questions about the role or require adjustments to support your application, please get in touch, we are happy to help.
Location: The role is a hybrid role, combining working from home with attendance at BPAS Head Office on a weekly basis. Occasional travel to BPAS sites will be required for meetings, audits, and training
BPAS Head Office, Orion House, Athena Drive, Tachbrook Park, Leamington Spa, CV34 6RQ
Salary: £37,391 to £48,731 per annum - Depending on skills and experience
Hours Per Week: 36 Hours (full time)
Hours of Work:
Monday to Thursday - 09:00 to 17:00 | Friday - 09:00 to 15:30
Apply now Interested in making a difference? Apply today to join our team.
Values & eligibility All applicants must be pro choice and support a woman's right to choose, in line with BPAS values and mission.
Application outcome If you do not hear from us within two weeks of the closing date, unfortunately you have not been shortlisted on this occasion.
References & pre-employment checks All offers of employment are conditional on satisfactory pre-employment checks. Applicants must provide three years of employment references, including reasons for leaving and details of any gaps in employment.
Job description
Job responsibilities
The full job description can be found on the right hand side in the supporting documents, which is available for you to download and review.
Further Information
We may close this advert early if we receive a high number of suitable applications, although we aim to keep it open long enough to ensure a diverse and representative applicant pool.
If you have any questions about the role or require adjustments to support your application, please get in touch, we are happy to help.
Location: The role is a hybrid role, combining working from home with attendance at BPAS Head Office on a weekly basis. Occasional travel to BPAS sites will be required for meetings, audits, and training
BPAS Head Office, Orion House, Athena Drive, Tachbrook Park, Leamington Spa, CV34 6RQ
Salary: £37,391 to £48,731 per annum - Depending on skills and experience
Hours Per Week: 36 Hours (full time)
Hours of Work:
Monday to Thursday - 09:00 to 17:00 | Friday - 09:00 to 15:30
Apply now Interested in making a difference? Apply today to join our team.
Values & eligibility All applicants must be pro choice and support a woman's right to choose, in line with BPAS values and mission.
Application outcome If you do not hear from us within two weeks of the closing date, unfortunately you have not been shortlisted on this occasion.
References & pre-employment checks All offers of employment are conditional on satisfactory pre-employment checks. Applicants must provide three years of employment references, including reasons for leaving and details of any gaps in employment.
Person Specification
Qualifications
Essential
- Degree or equivalent experience in IG, records management, data governance, or audit.
- Evidence of NHS IG or DSPT training.
Desirable
- BCS Practitioner Certificate in Data Protection, IAPP CIPP/E, or ISO 27001 lead auditor/assurance qualification.
Experience
Essential
- Experience in internal audit, assurance, or compliance roles.
- Demonstrable experience supporting NHS DSPT, CQC inspections, or external audits in a healthcare, charity, or regulated environment.
General
Essential
- Do you support a woman's right to choose abortion?
- Are you the family or friend of a current BPAS employee? If yes, please state the name and the nature of the relationship.
- This role for 36 hours per week and with a travel to head office (in Leamington Spa) on a weekly basis - Can you commit to this?
- Occasional travel to BPAS sites will be required for meetings, audits, and training - Can you commit to this?
Desirable
- Please list any further information or statements if you wish to support your application.
Knowledge and Skills
Essential
- Strong knowledge of UK GDPR accountability principles, NHS DSPT, CQC Regulation 17, and data protection audit frameworks.
- Understanding of risk registers, IAO roles, and audit trail integrity.
- Awareness of ISO 27001 and Cyber Essentials standards.
- Advanced analytical, assurance, and reporting skills.
- Ability to create dashboards, interpret metrics, and identify trends.
Person Specification
Qualifications
Essential
- Degree or equivalent experience in IG, records management, data governance, or audit.
- Evidence of NHS IG or DSPT training.
Desirable
- BCS Practitioner Certificate in Data Protection, IAPP CIPP/E, or ISO 27001 lead auditor/assurance qualification.
Experience
Essential
- Experience in internal audit, assurance, or compliance roles.
- Demonstrable experience supporting NHS DSPT, CQC inspections, or external audits in a healthcare, charity, or regulated environment.
General
Essential
- Do you support a woman's right to choose abortion?
- Are you the family or friend of a current BPAS employee? If yes, please state the name and the nature of the relationship.
- This role for 36 hours per week and with a travel to head office (in Leamington Spa) on a weekly basis - Can you commit to this?
- Occasional travel to BPAS sites will be required for meetings, audits, and training - Can you commit to this?
Desirable
- Please list any further information or statements if you wish to support your application.
Knowledge and Skills
Essential
- Strong knowledge of UK GDPR accountability principles, NHS DSPT, CQC Regulation 17, and data protection audit frameworks.
- Understanding of risk registers, IAO roles, and audit trail integrity.
- Awareness of ISO 27001 and Cyber Essentials standards.
- Advanced analytical, assurance, and reporting skills.
- Ability to create dashboards, interpret metrics, and identify trends.
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
