Job summary
An exciting opportunity has arisen to be part of a forward thinking and engaging information governance team. We are looking for an enthusiastic individual who is passionate about information governance compliance and has detailed knowledge of Data Protection legislation and extensive experience in large-scale implementations or projects involving significant information governance components as well as a passion for adult social care. The post will be for a 12 month fixed term contract from the start date of the post.
The post holder will work as part of the SEL ICB Information Governance Team and will be responsible for working with the CQC registered adult social care providers in South East London (care homes and domiciliary care) to implement an IG Framework and appropriate Data Protection documentation for the adoption of a Digital Social Care Record (DSCR) by March 2024. The post holder will also be required to provide operational advice and support to a number of designated stakeholders and work to build strong relationships with IG colleagues across the ICS.
The role is based at the South East London ICB offices in Tooley Street, with home working and travel across the South East London area as required. It is expected that the post holder will attend the central offices once a week with the Information Governance team.
Main duties of the job
As the Information Governance Manager for Adult Social Care, the post holder will be responsible for the delivery of an information governance assurance model, the development and delivery of standardised tools, operational support and advice to a number of designated stakeholders to the standard required by the relevant contract or service level agreement.
To develop, lead and co-ordinate a program of evidence gathering, assessment and audit, this includes the management of assurance, evidence and audit of significant providers of services. This comprises the escalation of issues of quality, risk and management through the appropriate channels and in conjunction with the Strategic Information Governance Lead. This role supports compliance with the following legislation:
- General Data Protection Regulation (GDPR EU & UK GDPR);
- The Data Protection Act 2018;
- The Freedom of Information Act 2000 (FOI(A));
- Environmental Information Regulations 2004 (EIR); and,
- Re-use of Public Sector Information Regulations 2015 (RPSI(R)).
About us
The South East London Integrated Care System (ICS) brings together the health and care partners that serve our vibrant and highly diverse populations resident in the London boroughs of Bexley, Bromley, Greenwich, Lambeth, Lewisham and Greenwich - our Places.Our partnership brings together six local authorities, over 200 general practices (operating within 35 Primary Care Networks), Guy's and St Thomas' Hospital NHS FT, King's College Hospital NHS FT, Lewisham and Greenwich NHS Trust, South London and the Maudsley Mental Health FT and Oxleas FT. Importantly, the ICS seeks to be connected to the communities we serve (circa 1.92m residents) and work with the widest possible range of community, voluntary and third sector groups and organisations in each borough. The reach of our NHS provider portfolios extends beyond the borders of the ICS, across London, thesouth of England and nationally for some services.Our vision for the ICS is a highly performing, sustainable system that looks after its staff, responds to its communities and takes action to reduce the inequalities they experience. As a new organisation we have developed a system development plan https://www.ourhealthiersel.nhs.uk/SDP-8-November-2021.pdf that outlines the way in which we seek to operate and the steps we will take to realise the full potential of our partnership
Job description
Job responsibilities
Please see attachments for the full Job Description and Person Specification
- Duties and Responsibilities
- Support the Digitising Social Care (DiSC) Programme mandate to accelerate the adoption of digital social care records, sensor based falls prevention and detection technologies and piloting other care technology to build an evidence base for future scaling.
- Work with the CQC registered adult social care providers in South East London (care homes and domiciliary care) to implement an IG Framework and appropriate Data Protection documentation for the adoption of a Digital Social Care Record (DSCR) by March 2024.
- Work with the CQC registered adult social care providers in South East London (care homes and domiciliary care) to implement an IG Framework and appropriate Data Protection documentation for the adoption of sensor-based falls prevention and detection technologies.
- Support with the improvement of data sharing so that commissioners are able to draw on timely and accurate data to inform commissioning and understand the needs and requirements of their local populations.
- Work closely with the South East London Digital Integration Support and Liaison Officers (DISLOs) to support the adult social care providers with the completion of the annual NHS Data Security and Protection Toolkit submission.
- Build strong relationships and collaboration working effectively with colleagues, CQC registered adult social care providers in South East London (care homes and domiciliary care) and ICS organisations to provide complex data protection advice and guidance in line with current local and national guidance.
- To provide expert advice, guidance and training on relevant aspects of data protection and information governance compliance monitoring and maintenance.
- Ability to develop and deliver training and guidance specific to the context of the South East London care homes and domiciliary care organisations suitable to staff at all levels.
- To outline, in conjunction with colleagues, the requirements of assurance and risk management on information governance and to ensure that particular stakeholder demands are met.
- To develop a systematic approach to information governance with clear systems of prioritisation, change management and control.
- To ensure the South East London care homes and domiciliary care organisations understand the standards required for information governance and risk management and their implementation in standard working practice.
- The delivery of operational support and assistance on site with stakeholder and engagement in routine business and development, to support the appropriate, proportionate and timely consideration of information governance issues in strategic and operational decisions.
- Development of standardised documentation (policy, strategy, protocol and procedure), with the option to tailor for specific circumstances.
- Engagement with national and regional bodies and forums, as required.
- Development and management of standardised information governance assurance framework and associated risk management framework. Ensure frameworks are tailored to meet specific requirements.
- Change management and process development, develop and deliver a change management framework, including risk assessments and Data Protection Impact Assessments (DPIAs) to cover new/changed systems and
- To be able to assess the quality of assurance provided on information governance and advise or escalate as required by circumstances and agreements.
- To understand key objectives in overall assurance, strategic objectives and the delivery of business and services and the impact of appropriate information governance on this agenda.
- Design data protection evidence specifications for suppliers and ensure contracts enable the provision of evidence to the standard.
- Provide advice on guidance on changes to be considered to improve patient outcomes and business efficiency, through process review and technology.
- Support and delivery of guidance for contracts (with third party suppliers) and commissioning of services to ensure IG elements are incorporated and best practice is followed where possible.
- Management of delivery of Data Processing Agreements and contract terms where necessary and in conjunction with legal advice.
- Provide data protection expertise (legal/statutory requirements) where necessary, including design and delivery of privacy information, guidance on the required consent model and engagement with patients, residents and service users.
- Development of bespoke policies, protocols and procedures. With supporting intranet pages, guidance and training based on standardised models produced by yourself and colleagues.
- Liaise with Informatics and ICT teams to ensure legal compliance and governance standards are met and implemented.
- Lead the delivery of key strategies with support from stakeholder leads.
- To operate in a highly political and sensitive environment.
- Support the portfolio of initiatives in demonstrating value for money for the current spend through tracking, managing and delivering agreed benefits.
- Where appropriate and capacity allows, support the wider ICB IG team with data protection matters, such as review and completion of Data Protection Impact Assessments, Data Processing Agreements, etc.
Job description
Job responsibilities
Please see attachments for the full Job Description and Person Specification
- Duties and Responsibilities
- Support the Digitising Social Care (DiSC) Programme mandate to accelerate the adoption of digital social care records, sensor based falls prevention and detection technologies and piloting other care technology to build an evidence base for future scaling.
- Work with the CQC registered adult social care providers in South East London (care homes and domiciliary care) to implement an IG Framework and appropriate Data Protection documentation for the adoption of a Digital Social Care Record (DSCR) by March 2024.
- Work with the CQC registered adult social care providers in South East London (care homes and domiciliary care) to implement an IG Framework and appropriate Data Protection documentation for the adoption of sensor-based falls prevention and detection technologies.
- Support with the improvement of data sharing so that commissioners are able to draw on timely and accurate data to inform commissioning and understand the needs and requirements of their local populations.
- Work closely with the South East London Digital Integration Support and Liaison Officers (DISLOs) to support the adult social care providers with the completion of the annual NHS Data Security and Protection Toolkit submission.
- Build strong relationships and collaboration working effectively with colleagues, CQC registered adult social care providers in South East London (care homes and domiciliary care) and ICS organisations to provide complex data protection advice and guidance in line with current local and national guidance.
- To provide expert advice, guidance and training on relevant aspects of data protection and information governance compliance monitoring and maintenance.
- Ability to develop and deliver training and guidance specific to the context of the South East London care homes and domiciliary care organisations suitable to staff at all levels.
- To outline, in conjunction with colleagues, the requirements of assurance and risk management on information governance and to ensure that particular stakeholder demands are met.
- To develop a systematic approach to information governance with clear systems of prioritisation, change management and control.
- To ensure the South East London care homes and domiciliary care organisations understand the standards required for information governance and risk management and their implementation in standard working practice.
- The delivery of operational support and assistance on site with stakeholder and engagement in routine business and development, to support the appropriate, proportionate and timely consideration of information governance issues in strategic and operational decisions.
- Development of standardised documentation (policy, strategy, protocol and procedure), with the option to tailor for specific circumstances.
- Engagement with national and regional bodies and forums, as required.
- Development and management of standardised information governance assurance framework and associated risk management framework. Ensure frameworks are tailored to meet specific requirements.
- Change management and process development, develop and deliver a change management framework, including risk assessments and Data Protection Impact Assessments (DPIAs) to cover new/changed systems and
- To be able to assess the quality of assurance provided on information governance and advise or escalate as required by circumstances and agreements.
- To understand key objectives in overall assurance, strategic objectives and the delivery of business and services and the impact of appropriate information governance on this agenda.
- Design data protection evidence specifications for suppliers and ensure contracts enable the provision of evidence to the standard.
- Provide advice on guidance on changes to be considered to improve patient outcomes and business efficiency, through process review and technology.
- Support and delivery of guidance for contracts (with third party suppliers) and commissioning of services to ensure IG elements are incorporated and best practice is followed where possible.
- Management of delivery of Data Processing Agreements and contract terms where necessary and in conjunction with legal advice.
- Provide data protection expertise (legal/statutory requirements) where necessary, including design and delivery of privacy information, guidance on the required consent model and engagement with patients, residents and service users.
- Development of bespoke policies, protocols and procedures. With supporting intranet pages, guidance and training based on standardised models produced by yourself and colleagues.
- Liaise with Informatics and ICT teams to ensure legal compliance and governance standards are met and implemented.
- Lead the delivery of key strategies with support from stakeholder leads.
- To operate in a highly political and sensitive environment.
- Support the portfolio of initiatives in demonstrating value for money for the current spend through tracking, managing and delivering agreed benefits.
- Where appropriate and capacity allows, support the wider ICB IG team with data protection matters, such as review and completion of Data Protection Impact Assessments, Data Processing Agreements, etc.
Person Specification
Equality and Diversity
Essential
- The promotion of equality of opportunity and good working relations (providing practical leadership)
Education / Qualifications
Essential
- Educated to masters level or equivalent level of experience of working at a senior level in specialist area.
- Evidence of continued professional development
- ISEB Information Security Management Principles qualification or equivalent
Knowledge & Experience
Essential
- Significant experience of implementing DPIAs, Data Processing and Sharing Agreements.
- Sound knowledge of the Data Protection Act and other key legislation around the security and processing of personal data within the NHS, Care Homes and Domiciliary Care.
- Significant experience in leading an information governance assurance framework and delivering to the required standard of quality assurance and audit.
- Understanding of technical aspects of information security.
Skills and Capabilities
Essential
- Demonstrable communication experience provision of highly complex information, negotiate with senior stakeholders on difficult and controversial issues, present to large and influential groups.
- Negotiate on difficult and controversial issues including performance and change.
- Problem solving skills and ability to respond to sudden unexpected demands
- Ability to analyse complex facts and situations and develop a range of options.
- Comprehensive experience of project principles, techniques, and tools such as Prince 2 and Managing Successful Projects.
- Experience of identifying and interpreting national policy.
- Working knowledge of Microsoft Office with intermediate keyboard skills.
- Experience in managing a budget, involved in budget setting and working knowledge of financial processes.
- Ability to travel between sites as required.
Autonomy
Essential
- Manage own workload and direct activities of others. Experience of managing and motivating a team and reviewing performance of the individuals.
- Demonstrated capability to plan short, medium and long-term timeframes and adjust plans and resource requirements accordingly
Person Specification
Equality and Diversity
Essential
- The promotion of equality of opportunity and good working relations (providing practical leadership)
Education / Qualifications
Essential
- Educated to masters level or equivalent level of experience of working at a senior level in specialist area.
- Evidence of continued professional development
- ISEB Information Security Management Principles qualification or equivalent
Knowledge & Experience
Essential
- Significant experience of implementing DPIAs, Data Processing and Sharing Agreements.
- Sound knowledge of the Data Protection Act and other key legislation around the security and processing of personal data within the NHS, Care Homes and Domiciliary Care.
- Significant experience in leading an information governance assurance framework and delivering to the required standard of quality assurance and audit.
- Understanding of technical aspects of information security.
Skills and Capabilities
Essential
- Demonstrable communication experience provision of highly complex information, negotiate with senior stakeholders on difficult and controversial issues, present to large and influential groups.
- Negotiate on difficult and controversial issues including performance and change.
- Problem solving skills and ability to respond to sudden unexpected demands
- Ability to analyse complex facts and situations and develop a range of options.
- Comprehensive experience of project principles, techniques, and tools such as Prince 2 and Managing Successful Projects.
- Experience of identifying and interpreting national policy.
- Working knowledge of Microsoft Office with intermediate keyboard skills.
- Experience in managing a budget, involved in budget setting and working knowledge of financial processes.
- Ability to travel between sites as required.
Autonomy
Essential
- Manage own workload and direct activities of others. Experience of managing and motivating a team and reviewing performance of the individuals.
- Demonstrated capability to plan short, medium and long-term timeframes and adjust plans and resource requirements accordingly
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).
From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).
Additional information
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).
From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).
