Job summary
An exciting opportunity has arisen to join the Information Governance Team within the Integrated Care Board (ICB) as an Information Governance Officer. This role will support the ICB in meeting its statutory, regulatory and organisational responsibilities for information governance, ensuring that information is managed securely, lawfully and effectively to support the delivery of high-quality healthcare and commissioning services across the health and care system. The post holder will play a key role in supporting compliance with data protection legislation, the UK GDPR, Data Protection Act 2018, Freedom of Information legislation, records management standards, information security requirements and wider NHS information governance obligations. Working with colleagues across the ICB and system partners, the Information Governance Officer will provide advice, guidance and practical support on a range of information governance matters. The successful candidate will help promote a culture of accountability and good information governance, supporting the safe and effective use of information to improve health outcomes, reduce inequalities and enable integrated working across the ICB geography.
Main duties of the job
Provide advice and guidance to ICB staff on information governance, data protection, confidentiality, records management and information security requirements.
Support the management of information rights requests, including Subject Access Requests (SARs), Freedom of Information (FOI) requests and other disclosures of information.
Assist with the investigation, management and reporting of information governance incidents, data breaches and near misses, ensuring lessons learned and improvement actions are implemented.
Support compliance with the NHS Data Security and Protection Toolkit (DSPT) and other relevant assurance and regulatory frameworks.
Contribute to the development, review and implementation of information governance policies, procedures and guidance.
Undertake audits, monitoring activities and compliance reviews to assess adherence to information governance requirements and identify areas for improvement.
Support the completion and maintenance of records of processing activities, information asset registers and other governance documentation.
Assist with Data Protection Impact Assessments (DPIAs), Data Sharing Agreements (DSAs) and the review of information sharing arrangements.
Maintain accurate records and produce reports, performance information and management information as required.
Keep abreast of changes in legislation, NHS guidance and best practice, supporting the organisation to respond to emerging information governance requirements.
Details
- Date posted: 02 November 2026
- Closing date: 18 November 2026
- Pay scheme: Agenda for change
- Band: Band 5
- Salary: £32,073 to £39,043 a year
- Contract: Permanent
- Working pattern: Part-time, Flexible working
- Reference number: D9467-JD283
- Job locations: NHS Dorset Integrated Care Board, NHS Dorset - County Hall, Colliton Park, Dorchester, Dorset, DT1 1XJ, United Kingdom
Job description
Job responsibilities
Please also refer to the attached detailed Job Description.
Provide advice and guidance to ICB staff on information governance, data protection, confidentiality, records management and information security requirements.
Support the management of information rights requests, including Subject Access Requests (SARs), Freedom of Information (FOI) requests and other disclosures of information.
Assist with the investigation, management and reporting of information governance incidents, data breaches and near misses, ensuring lessons learned and improvement actions are implemented.
Support compliance with the NHS Data Security and Protection Toolkit (DSPT) and other relevant assurance and regulatory frameworks.
Contribute to the development, review and implementation of information governance policies, procedures and guidance.
Undertake audits, monitoring activities and compliance reviews to assess adherence to information governance requirements and identify areas for improvement.
Support the completion and maintenance of records of processing activities, information asset registers and other governance documentation.
Assist with Data Protection Impact Assessments (DPIAs), Data Sharing Agreements (DSAs) and the review of information sharing arrangements.
Maintain accurate records and produce reports, performance information and management information as required.
Keep abreast of changes in legislation, NHS guidance and best practice, supporting the organisation to respond to emerging information governance requirements.
We work in a flexible and inclusive way to best support our colleagues, communities and partners. This means your role may involve a mix of working from different locations, including ICB offices, partner organisations, and community settings, as well as working from home. Some aspects of your role will require you to work in placemeeting face to face with colleagues, patients, partners and providersto build relationships, understand local needs and support the delivery of high-quality care. At other times, you will be able to work more flexibly, including remotely, depending on the needs of the role and the work being carried out. We aim to support a healthy worklife balance while ensuring we remain visible, connected and responsive to the communities we serve. You will be expected to work with your manager and team to agree a working pattern that supports both service delivery and your wellbeing.
Person Specification
Experience
Essential
- Please also see attached Person Specification.
- Has previously worked in a similar information governance and / or records management position within the public sector.
- Good working knowledge and understanding of the FoI Act and of data protection legislation, and track record / experience of applying these for the purposes of processing FoI and SAR requests and responses.
- Good working knowledge of the NHS Records Management Code of Practice, track record / experience of applying the Code to records management.
- Experience of IG policy development and implementation, experience of supporting an organisations compliance with data protection legislation and FoIA.
- Demonstrable appreciation and respect for the confidentiality of personal identifiable data.
- Demonstrable experience of technology-assisted document checking, editing, and redacting to comply with statutory requirements for SARs.
- Meticulous attention to detail while processing large quantities of written information in various formats.
- Appreciation and respect for the highly sensitive nature of information and data that is handled on a regular basis.
- Skills for communication on complex information and administrative matters, requiring developed interpersonal and oral/ written communication skills.
- Good communication on complex/ technical information, requiring developed interpersonal and oral/ written communication skills.
- Ability to pull together data and information into comprehensive draft reports.
- Negotiating, networking and persuasive skills.
- Problem solving skills and ability to respond to sudden unexpected demands.
- Excellent time management skills, with the ability to re- prioritise.
- Can discern when issues require escalation, and acts on this in a timely manner.
- Competent planner, organises and coordinates work per standard operating procedure and statutory timeframes.
- Skills for managing aspects of projects ensuring they meet statutory / regulatory targets.
- Well-developed skills for manipulating and editing information.
- Advanced keyboard skills, use of a range of software, in particular redacting software.
- Ability to work on own initiative and organise own workload with minimal supervision working to tight and often changing timescales.
- Good understanding of administrative procedures, project management and information analysis.
Qualifications
Essential
- Please also see attached Person Specification.
- Educated to degree level in relevant subject, or equivalent level of experience of working at a similar level in information governance / records management.
- Data protection qualification.
- Evidence of continuous training and development in data protection, IG, FoIA, records management
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
About us
Under the Model ICB Blueprint and the 10 Year Health Plan, ICBs will adopt a more strategic commissioning role, focusing on population needs, reducing inequalities, and delivering the three shifts as defined in the 10 year health plan, all while operating within strict financial limits.
The new organisation will operate on a larger scale with a revised vision and purpose, managing a commissioning budget of around £8 billion. Our role as a strategic commissioner is to transform our local NHS through exceptional commissioning and build an innovative health system fit for the 21st century that truly meets our communities needs. Informed by high quality data and insights, we will radically re-imagine how we operate, making sure that every pound in our system delivers the best possible value for everyone we serve.
We will encourage and support our people to grow and develop new skills and embrace new agile ways of working. Everyone is encouraged to contribute ideas, seek feedback, and take part in creating a listening and learning culture where insight leads to improvement.
We will work as a team of teams, collaborating across services and professions to deliver the best outcomes for our communities. You will be encouraged, and expected to model inclusive behaviours, valuing diverse perspectives and helping to create a workplace where everyone feels respected, supported, and able to thrive.
Employer details
- Employer name: NHS Dorset
- Address: NHS Dorset Integrated Care Board, NHS Dorset - County Hall, Colliton Park, Dorchester, Dorset, DT1 1XJ, United Kingdom
- Employer's website: https://nhsdorset.nhs.uk/