NHS Blood and Transplant

Senior Data Security & Privacy Manager

The closing date is 05 June 2025

Job summary

Are you ready to make a meaningful management impact in the world of Data Security and Privacy? NHSBT has the vision of Enabling a world where every patient receives the donation they need. This role will play a crucial part in achieving this vision by working within the Data Security, Privacy and Records Management (DSPR) function to manage the Data Security and Privacy teams ensuring that all NHSBT services, systems, and projects are secure and enable privacy by design.

In this exciting new role, you'll be at the forefront, reporting directly into the Head of DSPR and managing our Data Security and Privacy teams you will ensure that our data security and privacy practices align with regulatory requirements and industry standards. If you thrive in a high energy environment and are deeply committed to safeguarding people, assets, and our organisational reputation, and have people, management, technical skills, and data security and privacy expertise, we want you to be part of our close-knit team.

Your journey with us will involve managing, enhancing, and expanding our data security and privacy capabilities. This is a rewarding role in an organisation dedicated to saving and improving lives. Join us, and let's shape the future of Data Security and Privacy together at NHS Blood and Transplant.

This role offers a hybrid working arrangement. You will be assigned a base location at one of NHSBTs main centres subject to confirmation.

Main duties of the job

In this role you will play a key role in the Data Security, Privacy and Records Management (DSPR) team led by the Head of DSPR supporting all areas of the organisation.Your responsibilities will include:

  • Reporting to the Head of DSPR, operationally manage the Information Security and Data Privacy functions.
  • Support the delivery of the DSPR Programme, including BAU activity to ensure Security and Privacy operate as enablers, ensuring compliance with regulatory and statutory legislation.
  • Be a point of contact for specialist knowledge in Information Security and Data Protection, , providing expert guidance to the organisation and wider stakeholders.
  • Work across NHSBT to lead on the design and implementation of our Data Privacy Framework
  • Lead on the design, development of security supplier assurance framework to ensure full assurance across our supplier base.
  • Lead on the development, policies, procedures and guidelines to embed Security and Privacy by
  • Design across NHSBT Deliver specialist training and awareness activities in line with legislation across NHSBT
  • Lead on investigation on security incidents, escalating to the Head of DSPR and DPO as appropriate.
  • Lead on design and articulation of compliance indicators
  • Represent Data Security and Privacy as required at key NHSBT committees and boards
  • Lead on improvement areas as part of the wider strategic agenda.
  • Line Management responsibility for DSPR
  • Deputise for the Head of DSPR

About us

It takes all types of people to deliver the kind of service that saves and improves lives. At NHS Blood and Transplant, youll join a team of more than 6,000 people who are making a genuine difference to communities, families, friends, relatives and more across the UK. We play a unique and special role in the NHS by helping people do something extraordinary- donate blood, blood products, organs, tissues, or stem cells to save someone in need.

Our three core values are what set us apart. They guide and inspire everything we do.

By being caring, expertly meeting the needs of our patients and our people, and accepting nothing less than the best quality, we can do extraordinary work and help our people to do something extraordinary in their career, too. Three small words, one big difference - Caring, Expert and Quality. Together we'll save and improve more lives than ever.

You will join us on our journey to create an inclusive workplace and aim to reflect the diverse communities we work with, and we positively encourage applications from all sectors of the community.

Details

Date posted

23 May 2025

Pay scheme

Agenda for change

Band

Band 8a

Salary

£53,755 to £60,504 a year

Contract

Permanent

Working pattern

Full-time

Reference number

006525

Job locations

NHSBT

Liverpool Speke Blood Centre, 14 Estuary Banks, The Estuary Commerce Park, Speke

Liverpool

United Kingdom

L24 8RB


NHSBT

Bristol Filton, 500 North Bristol Park, Northway, Filton

Bristol

United Kingdom

BS34 7QH


NHSBT Colindale Blood Centre

Charcot Road, Colindale

London

NW9 5BG


NHSBT

Birmingham Blood Centre, Vincent Drive, Edgbaston

Birmingham

B15 2SG


NHSBT

Barnsley Blood Centre, Capitol Way, Dodworth

Barnsley

S75 3FG


NHSBT, Tooting Blood Centre

75 Cranmer Terrace, Tooting

London

SW17 0RB


NHSBT, Tooting Blood Centre

75 Cranmer Terrace, Tooting

London

SW17 0RB


Job description

Job responsibilities

Required to travel and spend time away from base, which will involve working irregular hours and overnight stays when required.

What we offer:

  • This role offers a hybrid working option, but you will be assigned a base location at one of NHSBTs main centres, which will be confirmed after the final interview outcome.
  • 27 days annual leave (pro rata for part-time) plus Bank Holidays, increasing to 29 days after 5 years service and to 33 days after 10 years.
  • NHS pension scheme. The NHS Pension Scheme is a defined benefit scheme (not dependent on investment returns) Further details and outline of benefits can be found at: www.nhsbsa.nhs.uk/pensions
  • Weve fostered a culture of continuous learning where colleagues are well-led, engaged, and encouraged to grow. We support you in reaching your full potential, both in your current role and future career. Our Thrive program embodies our commitment to learning and development, offering a wide range of activities to support your personal and professional growth. Its open to everyone at NHSBT, ensuring you have the resources to succeed and shine in your role.

Please view the attached recruitment profile which is a summary of the detailed Job Description and Person Specification for the full personal attributes we require for the role. You will need to demonstrate these throughout the recruitment process.

Job description

Job responsibilities

Required to travel and spend time away from base, which will involve working irregular hours and overnight stays when required.

What we offer:

  • This role offers a hybrid working option, but you will be assigned a base location at one of NHSBTs main centres, which will be confirmed after the final interview outcome.
  • 27 days annual leave (pro rata for part-time) plus Bank Holidays, increasing to 29 days after 5 years service and to 33 days after 10 years.
  • NHS pension scheme. The NHS Pension Scheme is a defined benefit scheme (not dependent on investment returns) Further details and outline of benefits can be found at: www.nhsbsa.nhs.uk/pensions
  • Weve fostered a culture of continuous learning where colleagues are well-led, engaged, and encouraged to grow. We support you in reaching your full potential, both in your current role and future career. Our Thrive program embodies our commitment to learning and development, offering a wide range of activities to support your personal and professional growth. Its open to everyone at NHSBT, ensuring you have the resources to succeed and shine in your role.

Please view the attached recruitment profile which is a summary of the detailed Job Description and Person Specification for the full personal attributes we require for the role. You will need to demonstrate these throughout the recruitment process.

Person Specification

Qualifications

Essential

  • Accredited professional qualification at masters level or clear equivalent experience in one or more of the following areas to Masters level:
  • Data Protection
  • Information Risk Management
  • Information Governance Practitioner
  • General Data Protection Regulation
  • GDPR/DPO awareness
  • Demonstrates commitment to own continued professional development (CPD)

Experience

Essential

  • Up to date knowledge of applicable legislation and relevant best practice within the public sector.
  • Evidence of knowledge of successful change management processes.
  • Experience in use of Data Privacy related systems provided by NHS Digital including DSP Toolkit and Data Privacy training Materials
  • Previous contribution to successful governance in a clinical organisation.
  • Previous experience in an IG/Data Privacy role.
  • Experience of regulation through the ICO and/or NHS Digital
  • Experience in updating refinement and execution IG/Data Privacy processes and procedures.
Person Specification

Qualifications

Essential

  • Accredited professional qualification at masters level or clear equivalent experience in one or more of the following areas to Masters level:
  • Data Protection
  • Information Risk Management
  • Information Governance Practitioner
  • General Data Protection Regulation
  • GDPR/DPO awareness
  • Demonstrates commitment to own continued professional development (CPD)

Experience

Essential

  • Up to date knowledge of applicable legislation and relevant best practice within the public sector.
  • Evidence of knowledge of successful change management processes.
  • Experience in use of Data Privacy related systems provided by NHS Digital including DSP Toolkit and Data Privacy training Materials
  • Previous contribution to successful governance in a clinical organisation.
  • Previous experience in an IG/Data Privacy role.
  • Experience of regulation through the ICO and/or NHS Digital
  • Experience in updating refinement and execution IG/Data Privacy processes and procedures.

Employer details

Employer name

NHS Blood and Transplant

Address

NHSBT

Liverpool Speke Blood Centre, 14 Estuary Banks, The Estuary Commerce Park, Speke

Liverpool

United Kingdom

L24 8RB


Employer's website

https://www.nhsbt.nhs.uk/ (Opens in a new tab)

Employer details

Employer name

NHS Blood and Transplant

Address

NHSBT

Liverpool Speke Blood Centre, 14 Estuary Banks, The Estuary Commerce Park, Speke

Liverpool

United Kingdom

L24 8RB


Employer's website

https://www.nhsbt.nhs.uk/ (Opens in a new tab)

Employer contact details

For questions about the job, contact:

Head of Data Security, Privacy and Records

Joanne Fitzpatrick

joanne.fitzpatrick@nhsbt.nhs.uk

Details

Date posted

23 May 2025

Pay scheme

Agenda for change

Band

Band 8a

Salary

£53,755 to £60,504 a year

Contract

Permanent

Working pattern

Full-time

Reference number

006525

Job locations

NHSBT

Liverpool Speke Blood Centre, 14 Estuary Banks, The Estuary Commerce Park, Speke

Liverpool

United Kingdom

L24 8RB


NHSBT

Bristol Filton, 500 North Bristol Park, Northway, Filton

Bristol

United Kingdom

BS34 7QH


NHSBT Colindale Blood Centre

Charcot Road, Colindale

London

NW9 5BG


NHSBT

Birmingham Blood Centre, Vincent Drive, Edgbaston

Birmingham

B15 2SG


NHSBT

Barnsley Blood Centre, Capitol Way, Dodworth

Barnsley

S75 3FG


NHSBT, Tooting Blood Centre

75 Cranmer Terrace, Tooting

London

SW17 0RB


NHSBT, Tooting Blood Centre

75 Cranmer Terrace, Tooting

London

SW17 0RB


Supporting documents

Privacy notice

NHS Blood and Transplant's privacy notice (opens in a new tab)