Job summary
We are seeking a motivated and knowledgeable Data Security & Protection (DSP) Adviser to join our Group DSP Team at University Hospitals of Northamptonshire. This is an exciting opportunity to play a vital role in safeguarding patient and organisational information, supporting Trust-wide compliance with data protection legislation, and helping staff deliver safe, secure and excellent care.
Main duties of the job
As a DSP Adviser, you will act as the first point of contact for routine Data Security & Protection queries and contribute to the delivery of the Group's Data, Security & Protection (DSP) strategy. Your responsibilities will include:
- Providing clear, specialist advice on UK GDPR, Data Protection Act 2018 and confidentiality requirements.
- Managing and investigating data security incidents via Datix, escalating concerns where appropriate.
- Delivering DSP training sessions (classroom, small groups, MS Teams) and helping maintain compliance above required thresholds.
- Maintaining key organisational records including the Information Asset Register and Information Sharing Gateway.
- Supporting colleagues with Data Protection Impact Assessments, Privacy Notices and policy development.
About us
**Please submit your application as soon as possible as we reserve the right to close any adverts before the closing date once we have received sufficient applications**
Northampton General Hospital NHS Trust is one of the largest employers in the area and we are on an exciting journey. All our divisions are committed to doing things better, with more efficiency as we update, modernise, and advance. We have also entered a Group Model with neighbouring Kettering General Hospital NHS Foundation Trust and become University Hospitals of Northamptonshire.
Our Excellence Values
- Compassion
- Accountability
- Respect
- Integrity
- Courage
We want to recruit the best people to deliver our services across the University Hospitals of Northamptonshire and help to unleash everyone's full potential.
The Hospital Group encourages applications from people who identify from all protected groups. We understand that we need to work with colleagues from diverse backgrounds and make sure the environment they work in is inclusive and collaborative.
We recognise the valuable contribution that the Armed Forces community make to our organisation. We have signed the Armed Forces Covenant and achieved Silver Award under the Armed Forces Employer Recognition Scheme.
We have active Networks that promote and support colleagues from all backgrounds. This ensures everyone feels supported and has a sense of belonging working for Kettering and Northampton General Hospitals.
Job description
Job responsibilities
Data Security and Protection (DSP)
-
Provide specialist advice andassistanceto staff whererequiredon areas of complex information governance legislation, such as UK GDPR, Data Protection Act 2018 and the NHS Code of Practice on Confidentiality
-
To work closely with department colleagues, support services, clinical services,operational and strategic Data Security and Protection leads and internal and external DSP colleagues to promote excellent Information Governance, Data Security and Data Protection practice, by advising and supporting them in their understanding and delivery of these requirements.
-
Be the first line of response for data security and protection queries providing support,adviceand guidance to key areas of the Trust including Research and Innovation, Complaints,Governanceand IT.
-
Manage DSP records, both paper and electronic, updating reports,maintainingaction plans,policiesand procedures etc.
-
Maintain a register of Information Governance related incidents and produce regular reports from Datix, liaising with all departments and Risk Management asappropriate, leading on incident investigations where appropriate.
-
Understand andmonitorcompliance with relevant legislation, particularly the common law duty of confidentiality, the Data Protection Act 2018, the General Data Protection Regulation, the Computer Misuse Act 1990, the Human Rights Act 1998;
Training & Audit
Job description
Job responsibilities
Data Security and Protection (DSP)
-
Provide specialist advice andassistanceto staff whererequiredon areas of complex information governance legislation, such as UK GDPR, Data Protection Act 2018 and the NHS Code of Practice on Confidentiality
-
To work closely with department colleagues, support services, clinical services,operational and strategic Data Security and Protection leads and internal and external DSP colleagues to promote excellent Information Governance, Data Security and Data Protection practice, by advising and supporting them in their understanding and delivery of these requirements.
-
Be the first line of response for data security and protection queries providing support,adviceand guidance to key areas of the Trust including Research and Innovation, Complaints,Governanceand IT.
-
Manage DSP records, both paper and electronic, updating reports,maintainingaction plans,policiesand procedures etc.
-
Maintain a register of Information Governance related incidents and produce regular reports from Datix, liaising with all departments and Risk Management asappropriate, leading on incident investigations where appropriate.
-
Understand andmonitorcompliance with relevant legislation, particularly the common law duty of confidentiality, the Data Protection Act 2018, the General Data Protection Regulation, the Computer Misuse Act 1990, the Human Rights Act 1998;
Training & Audit
Person Specification
Educations, Training and Qualifications
Essential
- Educated to degree level or equivalent level of education, training or experience
- Professional relevant qualification, for example GPDR Foundation
- Evidence of continuous professional development
Desirable
- Additional professional relevant qualification, for example, GDPR Practitioner
- Relevant professional qualification in training development/ training delivery
- Formal Data Protection Act Training
Knowledge and Experience
Essential
- Demonstrable understanding of data security and protection
- Working knowledge of Data Protection Act 2018, UK GDPR
- Experience in developing and delivering training sessions
- Experience in identifying and investigating data security and protection issues and incidents
- Experience of supporting the completion of Data Protection Impact Assessments and identifying information risks
- Evidence of up to date knowledge of data security and protection guidelines and legislation relevant to the NHS.
- Experience in reviewing and updating Policies and Procedures.
Desirable
- Experience of working in the NHS
- Analytical and judgement skills for problem solving
- Previous experience of the Information Sharing Gateway
- Working knowledge of Freedom of Information Act 2000 and Records Management.
- Experience of working with the DSP Toolkit in an acute NHS setting.
- Previous experience of the Information Sharing Gateway
Skills
Essential
- Excellent written and verbal communication skills.
- Developed attention to detail and accuracy.
- Excellent IT skills, including experience of Microsoft Word, Excel, PowerPoint, Outlook and Visio.
- Ability to deliver clear and effective training to staff at all levels and of all abilities.
- Ability to communicate appropriately and effectively with all levels of staff.
- Ability to cope under pressure and meet strict deadlines e.g. FOI responses, Incident response times
- Ability to take accurate meeting notes including action and decision logs.
Desirable
- Advanced Excel skills, including data presentation.
- Able to learn and utilise new systems quickly and effectively.
- Data analysis skills
- Ability to interpret and judge conflicting views
- Negotiation skills
Person Specification
Educations, Training and Qualifications
Essential
- Educated to degree level or equivalent level of education, training or experience
- Professional relevant qualification, for example GPDR Foundation
- Evidence of continuous professional development
Desirable
- Additional professional relevant qualification, for example, GDPR Practitioner
- Relevant professional qualification in training development/ training delivery
- Formal Data Protection Act Training
Knowledge and Experience
Essential
- Demonstrable understanding of data security and protection
- Working knowledge of Data Protection Act 2018, UK GDPR
- Experience in developing and delivering training sessions
- Experience in identifying and investigating data security and protection issues and incidents
- Experience of supporting the completion of Data Protection Impact Assessments and identifying information risks
- Evidence of up to date knowledge of data security and protection guidelines and legislation relevant to the NHS.
- Experience in reviewing and updating Policies and Procedures.
Desirable
- Experience of working in the NHS
- Analytical and judgement skills for problem solving
- Previous experience of the Information Sharing Gateway
- Working knowledge of Freedom of Information Act 2000 and Records Management.
- Experience of working with the DSP Toolkit in an acute NHS setting.
- Previous experience of the Information Sharing Gateway
Skills
Essential
- Excellent written and verbal communication skills.
- Developed attention to detail and accuracy.
- Excellent IT skills, including experience of Microsoft Word, Excel, PowerPoint, Outlook and Visio.
- Ability to deliver clear and effective training to staff at all levels and of all abilities.
- Ability to communicate appropriately and effectively with all levels of staff.
- Ability to cope under pressure and meet strict deadlines e.g. FOI responses, Incident response times
- Ability to take accurate meeting notes including action and decision logs.
Desirable
- Advanced Excel skills, including data presentation.
- Able to learn and utilise new systems quickly and effectively.
- Data analysis skills
- Ability to interpret and judge conflicting views
- Negotiation skills
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).
From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).
Additional information
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).
From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).
.jpg){kind=logo}
