Full job descriptionSenior information governance officerBand 6Main area

Information Governance
Grade

Band 6
Contract

Permanent: Monday - Friday
Hours

Full time - Monday to Friday
Job ref

367-CORP-101704
Site

Waverley Road
Town

St Albans
Salary

£39,959 - £48,117 Per annum, Pro rata (5% HCAS Included)
Salary period

Yearly
Closing

27/10/2026 23:59
Values Based ScreenerAt Hertfordshire Partnership Foundation Trust we are looking for people to join us who share our values and those of the NHS. Before your application can be considered please take part on our online values questionnaire, which you can find below. When you have finished you will be sent a ’completion code’ by email, which will be valid for 6 months and required to submit your application form.


Job overviewTo support in implementing the organisations IG agenda which will include the delivery of the Data Security and Protection toolkit (DSPT) and associated evidence/workstreams ensuring evidence is contemporaneous and accessible for submission, the completion of IG documentation such as DPIA’s, DSA’s, DPA’s, delivering the IG training, supporting data breaches, completing and reviewing subject access requests and processing FOI’s.
Main duties of the jobTo support the Head of Information Rights & Compliance in the provision of information management service across the Trust. The post holder will be the main point of contact for day-to-day issues where advice and guidance is required on records and information governance issues. This will include giving advice on all aspects of records and information management from creation to destruction
Working for our organisationHertfordshire Partnership University NHS Foundation Trust are one of just five mental health trusts to achieve an overall rating of ’Outstanding’ from the Care Quality Commission.
Our family of over 4,500 members of staff provide health and social care for people with mental ill health, physical ill health and learning disabilities across Hertfordshire, Buckinghamshire, Essex and Norfolk, delivering these services within the community and several inpatient settings. Everything is underpinned by choice, independence and equality, with our Trust values embedded throughout:
Welcoming. Kind. Positive. Respectful. Professional.
Detailed job description and main responsibilities*The post holder is responsible for gathering and providing information for external auditors to ensure compliance i.e.
· CQC standards
· Information Governance Toolkit
· Access to Health Records Act 1990
· Common Law & Duty of Confidence
*Responsible for monitoring and evaluating service compliance with information governance and CQC standards.

*Develop and maintain databases to record and report on the:

· FOI requests
· Formal access requests
· Storage of records
· Information security breaches
*Provide monthly reports to the Information Governance Manager and Head of Information Rights & Compliance.

*Provide specialist advice and guidance to all levels of staff on the:

· UK General Data Protection Regulations
· Freedom of Information Act 2000 (FOI)
· Environmental Information Regulations 2000 (EIR)
· Data Protection Act 2018 (DPA)
· Records management standards (both corporate & clinical)
· NHS Code of Confidentiality
· Information Security
*Advise staff on the handling and communication of patient identifiable information both internally and externally.

*Provide advice to members of the public (including service users and carers) who may need assistance with an information request.

*Raise awareness of the importance of information governance throughout the Trust and encourage all members of staff to participate in raising information governance standards.

*Ensure that the confidentiality, security, and integrity of all information are maintained across the Trust.

*Explain new practices and changes that are required as a result of the implementation of changes to Legislation, national standards.

*Undertake an ongoing evaluation of the effectiveness of the information governance process and implement further refinements as necessary.

*Investigation of suspected and actual breaches of information governance and undertake reporting/remedial action as required. Maintain a log of any incidents and remedial recommendations and actions.

*Design, undertake & analyse audits on the use of Trust systems e.g. EPR and Business Intelligence Systems as required.

*Promote the role of Information Asset Owner, ensuring regular communication between information asset administrator, information asset Owner and SIRO.

*Assist in the development of corporate wide policies / data privacy impact assessments in their area of experience.

*Development and delivery of effective training for staff at all levels in order to ensure that high standards for information management are implemented across the Trust.

Person specificationQualifications/Education and TrainingEssential criteria*Experience in the relevant field
*Degree or equivalent experience
Desirable criteria*Relevant professional qualification e.g., Records Management, ISEB, BCS Freedom of Information qualification, ISEB/BCS Data Protection Act qualification
PREVIOUS EXPERIENCEEssential criteria*Experience of managing people
*Experiencing of re - ordering stock/goods from an agreed point/supplier on a regular basis
*Evidence of training individuals and groups
Desirable criteria*Experience of managing projects
Please note, we do not charge fees for job applications, recruitment processes, sponsorship arrangements, or employment offers. Please see the Trust careers vacancy webpage and Trac as the only authorised routes for recruitment communications, applications and verification of job offers.
Employer certification / accreditation badgesApplicant requirementsThis post will require a submission for Disclosure to be made to check for any unspent criminal convictions.
Application numbersThis vacancy may close early if we receive a high number of applications. Please complete and submit your application promptly.