Information Governance Lead Birmingham
Published: 3rd September 2020
Job Type
£400 - 440 per day


Role: Information Governance Lead

Contract Length: 12 Months

Location: Leeds (remote at present)

IR35: Inside

Rate: £400-440/day

Security Clearance: Basic Disclosure

The Role:

The recent COVID-19 crisis as elevated the importance of Information Governance (IG), resulting in the requirement for enhanced stakeholder engagement and openness into the use of data for direct and secondary use, including planning and research purposes and the public need to be confident that their data is protected and only used when adequate controls are in place.

Working in a complex and high-pressure environment, as Principal IG Specialist you will be expected to managing and lead on competing and challenging workloads and business priorities, as well as lead on supporting the work of our programmes and services, partner organisations and stakeholders with regards to data protection, ethics and transparency whilst championing responsible use of patient data to improve patient care and health services.

You will work with the Information Governance Team and will be responsible for the delivery of expert subject matter expertise to a range of programmes and services within NHS Digital this will include supporting more junior members of staff and may involve

Information governance at NHS Digital means the application of privacy, transparency and ethics law and principles in relation to the collection, use, storage, management, publication, disclosure and destruction of personal and corporate information in compliance with all relevant law and legislation including but not limited to: 

  • GDPR and DPA 2018
  • Privacy and E-Commerce Regulations 
  • Human Rights Act 
  • Common Law Duty of Confidence 
  • Freedom of Information Act
  • Environmental Information Regulations 
  • Reuse of Public Sector Information Regulations 
  • Public law 



  • Expert working knowledge and understanding of IG best practice, standards, law and legislation. 
  • Expert knowledge of IG terminology and the application of IG large scale information systems e.g. Privacy by Design and Data Protection Impact Assessments and transparency requirements.
  • Expert knowledge of other relevant health and social care legislation including Health and Social Care Act 2012, NHS Act 2006.
  • Expert knowledge of the public interest and its application in relation to information requests.
  • Expert knowledge of public sector governance and ethics in relation to how public sector organisations operate and how personal data is obtained, used and shared.
  • Comprehensive knowledge in the role of transparency and its application to the publication and use of relevant information.
  • Advanced working knowledge of implementation activities across; pre-transition, transition and post transition.
  • Working knowledge of Caldicott principles and experience in decision making related to these principles.
  • Working knowledge of principles and best practices of records management.
  • Working knowledge of project management principles.
  • Working knowledge of Health and Social Care systems and data flows.
  • Working knowledge of the structures and strategic vision of Health and Social Care.
  • Working knowledge of project and programme frameworks and practices.
  • Working knowledge of the Agile manifesto and agile principles, and how they can be used to help deliver products and services.
  • Understanding of public law and legislation and its application in the health and social care context.
  • Understanding of the requirements of the Data Security and Protection Toolkit (DSPT).
  • Understanding of data security requirements in the handling of data.
  • Understanding of different stakeholder perspectives including the public perspectives.
  • Awareness of project management methodologies.


  • Working knowledge of the public interest and its application in relation to the use and disclosure of confidential patient information.
  • Working knowledge of the governance of the use of personal information for the provision of direct care and secondary uses.
  • Understanding of the principles of risk management and how there is a need to balance the needs of IG with technological advances and other competing priorities.

Skills and experience


  • Significant experience of providing practical and solutions-focused IG input and advice to a variety of highly complex services / projects / programmes. 
  • Significant experience of undertaking research, investigation and analysis in line with business needs to form recommendations based on highly complex legal and ethical requirements.
  • Significant experience of making timely and informed decisions to provide an effective and efficient service to stakeholders.
  • Significant experience of providing IG subject matter expertise on a range of highly complex matters and effectively communicating to non-IG internal and external stakeholders.
  • Significant experience of developing and implementing complex process and procedures in accordance with organisational and national policy and standards.
  • Significant experience of applying safe information disclosure techniques and adherence to relevant codes of practice and guidance. 
  • Significant experience of identifying and effectively managing risks and issues and escalate where appropriate.
  • Significant experience of successfully delivering IG advice across a number of projects or services simultaneously, ensuring effective economies of scope and sharing of best practice.
  • Significant experience of motivating individuals/teams to achieve challenging goals, providing support tools to enable delivery against key performance indicators.
  • Significant experience of identifying staff training needs and actively training/mentoring staff members on complex and specialist knowledge.
  • Significant experience in developing a culture of continuous improvement and excellent service delivery.
  • Significant experience of respectfully educating and supporting learning and development in IG for staff at all levels to promote and embed IG at the heart of everything we do.
  • Significant experience assessing individual/team performance, capability & skill gaps, rewarding exceptional performance and developing improvement plans where required.
  • Experience of developing and implementing of a range of complex IG policies, guidance and procedures.
  • Experience of preparing and facilitating training for a wide range of staff, including senior staff in IG principles.
  • Experience of leading and delivering change and development programmes.
  • Experience of presenting findings at executive level and to informing strategic decision making.
  • Experience delivering specialist IG related training or presentations to a variety of audiences.
  • Experience in providing IG advice on complex issues into projects and programmes.
  • Experience of undertaking data protection impact assessments and of use of other relevant information risk assessment tools.  
  • Experience in developing department wide succession planning and robust people management practices that improve organisational productivity and efficiency.
  • Ability to develop self and others to harness a “one team” culture across IG.
  • Understanding of the balance required between information risk and IG/data security.



  • Educated to Master’s level (in a relevant subject, including law) or equivalent experience within a professional information Governance work environment.
  • And, specialist accredited qualifications in at least one of the following: GDPR 2016, DPA 2018 and FOI Act 2000 at practitioner level or equivalent e.g. (but not limited to) BCS, ISEB, PDP, IAPP qualifications.
  • And, evidence of continuous learning and development e.g. IG related certificates/training/webinars/conferences/CPD/Civil Service-Learning e-learning.

To apply for this role please submit your latest CV or contact Aspect Resources on 0121 794 8181

Drop files here browse files ...