Records Management and Information Governance Manager

Band 3 - £42,800 - £51,700  -the right candidate can expect to be appointed at the starting point of the band.

Contracted Hours: Full time 36 hours per week

Contract Type: Permanent

Closing date: Monday 8th April 2024 at 11.59pm

Interview date: W/C 22nd April 2024

This role is NOT open to applications from those who will require sponsorship under the points-based system. Should you apply for this role and be found to require sponsorship, your application will be rejected, and any provisional offer of employment withdrawn.

CQC are advertising this role on behalf of the Human Tissue Authority

 About the Human Tissue Authority€¦

The Human Tissue Authoritys (HTAs) primary goal is to protect public and professional confidence in the safe and ethical use of human tissue. We are the national independent regulator for organisations that remove, store and use tissue for research, medical treatment, post-mortem examination, teaching and public display. We also approve organ and bone marrow donations from living people. With the interests of the public and those we regulate at the centre of our work, we aim to maintain confidence by ensuring that human tissue is used safely and ethically, with proper consent.

The pace of innovation in cell, tissue and organ-based therapies, in life sciences research and the use of technological advances have the potential to hugely impact the way our sectors work and in turn how we must operate.

Established under the Human Tissue Act (2004), we are an Executive Non- Departmental Public Body (ENDPB)sponsored by the Department of Health.

The Authoritys Chair and members are appointed by the Secretary of State for Health. The Chair and half of the members are lay, with the remainder being professionals drawn from some of the groups who are affected by the legislation. The Authority is supported by an Executive team of 50 staff.

Why this could be a great role for you€¦.

A unique opportunity has become available for a Records Management & Information Governance Manager to join our team. The Records Management & Information Governance Manager plays a key part in supporting the HTA to achieve its vision by directing the overall management and planning of this function, reviewing, updating and implementing systems and processes to deliver compliance across all of the HTAs activities.

The postholder will provide leadership and expert advice on records management and information governance across the organisation and will play a key role in the development of a robust framework that embeds best practice and delivers compliance with relevant national standards.

The Records Management & Information Governance Manager has Data Protection responsibilities.

The post holder will collaborate with subject matter experts across the HTA to manage the annual NHS data protection and security toolkit assessment. You will be the point of contact for personal data breaches.

What we can offer you...

Your health and wellbeing are important to us and are supported through generous annual leave (32.5 days, plus 8 Bank Holidays). We also offer membership of the NHS pension scheme. As this role is homebased we ensure our Homeworkers are also kitted out with everything they need to comfortably work from home.

Remote working option *Standard contracts available are homeworking (an average of 3 days in the office each month) or office-based (minimum of 1 day a week in the office).

What you will bring€¦

You will have previous experience of working in a Healthcare Environment and have sound knowledge and experience in all areas of Information Governance, particularly UK GDPR/Data Protection 2018 and other relevant legislation such as Access to Healthcare Records Act 1990, Freedom of Information (FOI) and Environmental Information Regulation (EIR).

We are particularly keen to hear from those with experience of developing and reviewing information sharing and transfer agreements and experience of working with the Data Security & Protection Toolkit (DSPT).

You will be confident and able to provide expert advice to the HTA on all aspects of Data Protection and Data Protection Impact Assessments and lead on the delivery and maintenance of required policies and procedures.

Essential Criteria:

First degree and/or equivalent experience.

Information Governance (IG) or Data Protection related accreditation

In depth experience of delivering a full IG function across an organization including information sharing and transfer, legislation, developing and implementing training to increase data protection awareness across the HTA, FOI, Subject Access requests, IG incidents, IG risk and records management.

Experience of developing and reviewing information sharing and transfer agreements.

Experience of working with the Data Security & Protection Toolkit (DSPT).

Experience in review and assessment of Data Privacy Impact Assessments.

Experience of working as a Senior IG Officer or lead for Information Governance.

Detailed knowledge of relevant corporate, professional and/or legal standards.

Excellent and in-depth knowledge of wide areas of IG legislation, concepts and practices. Can plan, schedule and monitor work, within set targets, for small dedicated teams.

Experience in handling IG security incidents and breaches.

Experience of staff management or can demonstrate ability to lead team members directly or indirectly.

Ability to work in a demanding environment.

Knowledge of information governance legal and national regulatory requirements, including the General Data Protection Regulation and the Data Protection Act, Freedom of Information/Environmental Information Regulation and Access to Health Records Acts.

Able to provide evidence of where you have demonstrated the HTA's Values and Behaviours.

Able to demonstrate excellence in Customer Service and promotes partnership and collaborative working within teams.

Able to meet the required IT skills for the post.

Draws rational and defensible conclusions, using appropriate information/ data and provides analysis in support of conclusions.

Encourages rigour and provides critical challenge in determining outcomes.

Undertakes robust risk and impact management.

Ability to communicate effectively both in writing and verbally.

Desirable Criteria:

IAPP accredited privacy qualification (CIPM, CIPP/E) or similar qualification.

GDPR Practitioner Certificate.

Experience of working with and across a number of agencies including the Information Commissioners' Office (ICO).

Experience of acting as a Data Protection Officer (DPO).

Experience and knowledge of records management and information governance practices, particularly in health and the wider public sector and corresponding national standards.

Knowledge of confidentiality guidance (e.g. Caldicott Principles).

Able to respond and manage responses to concerns and requests around HTA records including staff and financial records and facilitate organisational learning.

Able to respond quickly to data protection and security incidents and liaise with internal and external experts as appropriate.

For an informal discussion or further information on the role, please contact recruitment@cqc.org.uk

Individual adjustments...

We are committed to being open and transparent around our processes and we endeavour to offer every candidate the opportunity to perform at their best throughout the recruitment process. We seek to support candidates to identify potential challenges and work with them to identify and facilitate reasonable adjustments as appropriate. Should you require assistance and/or would like to request a reasonable adjustment at any stage of the recruitment process, please contact a member of the team via email: recruitment@cqc.org.uk