Information Governance Manager (Secondary Care)
NHS Jobs Warrington
Professional 1. To manage the IG Business Partners and Advisors, including allocating them work, managing supervision and performance appraisals, ensuring that staff are managed and developed effectively, and any other line management duties as needed.
2. Support the IG Business Partners in assisting in the development of new Trust services/systems, ensuring any IG arrangements are robust and that high standards are established from the beginning (Data Protection by Design and Default). 3. To promote awareness of the strategies, policies and procedures amongst staff and other stakeholders including health and social care professionals via workshops, presentations, induction and mandatory training.
4. To assist with the production of policies, guidance, leaflets and training materials. 5. To maintain the IG and Data Protection sections of the Trusts Intranet and website, ensuring appropriate information and documentation is available to support staff and inform patients.
6. To contribute to the development of the annual IG Communications Plan and the production of any documentation identified within it by the set deadlines. 7. To contribute to the development of the annual IG Work Plan, completing any tasks allocated to the post-holder by the set deadlines.
8. To facilitate, contribute and support the work of the Trusts Information Governance and Security Forum and Virtual User Groups, including the cascading of information to staff. 9. To assist the Deputy Head of IG in interpreting national guidance in respect of IG and Data Protection, and any new/changes to current legislation, and its dissemination to ensure that the Trusts legal obligations are met.
10. To supervise the collection and validation of evidence and ensure that the Trust adheres to current standards stated within the Data Security and Protection (DSP) Toolkit, liaising with the IM&T Security Team to ensure a consistent and co-ordinated approach.
11. To participate in the Trusts annual DSP Toolkit audit. 12. To administer the Trusts Information Asset Register, ensuring all annual reviews are undertaken (e.g., supplier due diligence, business continuity planning and testing, etc). 13. Work proactively with Information Asset Owners (IAOs) and Administrators (IAAs) to ensure information systems are risk assessed and secure, ensuring the CIA Triad of Confidentiality, Integrity and Availability can be maintained.
14. Ensure all IAOs and IAAs are appropriately briefed, trained and supported in their roles. 15. Work with the Procurement Team to undertake due diligence against each IT supplier, participating in supplier assurance audits and assisting in contract disputes were required.
16. Maintain the Trusts information flow maps between the Trust and its partner organisations providing advice and guidance where necessary. Undertake risk assessments of all information flows to ensure they do not contravene Trust policies and procedures (and therefore national guidance/legislation).
17. Support with the production and/or evaluation of Data Protection Impact Assessments (DPIAs) and Data Sharing Agreements (DSAs), providing advice to staff completing them as needed. 18. To present DPIAs and DSAs to the Data Protection Panel for review and approval.
19. Administer the Trusts Information Sharing Gateway account, ensuring DSAs are kept up-to-date and relevant. 20. Assist with the maintenance of the Trusts Record of Processing Activities. 21. To assist with the management of the IG Risk Register.
22. Supervise the process for managing, monitoring, reporting, and investigating IG and Data Protection incidents and identifying incidents that are legally required to be reported within 72- hours. 23. Provide reports on incidents to relevant meetings, ensuring trends and areas of concern are flagged up for further discussion and action.
24. Draft staff briefings in relation to findings from thematic analyses of IG and Data Protection incidents. 25. Undertake IG and Data Protection audits, analysing and presenting findings as required and assisting with the development and implementation of any actions plans.
26. Provide advice and take action in response to audit findings and recommendations. 27. To monitor the Teams shared mailboxes, allocating work to the appropriate staff as needed. 28. To act as the designated deputy and represent the Deputy Head of IG (Secondary Care) as directed at internal/external meetings.
29. To provide cover for the IG Manager (Primary Care), Information Assurance Manager and/or Records Manager during periods of leave and sickness, managing the relevant teams to ensure work continues uninterrupted and responding to any queries or concerns.
30. To network with neighbouring trusts and other organisations as appropriate and represent the Trust at local or national events. 31. To participate in any local or national professional activities in order to continue personal and professional development.
Education and Development 32. To agree and review own objectives with their line manager and to ensure a PersonalDevelopment Plan is produced. 33. Participate in regular supervision, engage in reflective practice and be committed to continueddevelopment.
34. Develop own skills and knowledge and contribute to the development of others. 35. Write, develop, and deliver clear IG and Data Protection training and awareness materials to awide range of staff across the Trust on complex and specialist topics in a way that complements the Trusts e-learning.
2. Support the IG Business Partners in assisting in the development of new Trust services/systems, ensuring any IG arrangements are robust and that high standards are established from the beginning (Data Protection by Design and Default). 3. To promote awareness of the strategies, policies and procedures amongst staff and other stakeholders including health and social care professionals via workshops, presentations, induction and mandatory training.
4. To assist with the production of policies, guidance, leaflets and training materials. 5. To maintain the IG and Data Protection sections of the Trusts Intranet and website, ensuring appropriate information and documentation is available to support staff and inform patients.
6. To contribute to the development of the annual IG Communications Plan and the production of any documentation identified within it by the set deadlines. 7. To contribute to the development of the annual IG Work Plan, completing any tasks allocated to the post-holder by the set deadlines.
8. To facilitate, contribute and support the work of the Trusts Information Governance and Security Forum and Virtual User Groups, including the cascading of information to staff. 9. To assist the Deputy Head of IG in interpreting national guidance in respect of IG and Data Protection, and any new/changes to current legislation, and its dissemination to ensure that the Trusts legal obligations are met.
10. To supervise the collection and validation of evidence and ensure that the Trust adheres to current standards stated within the Data Security and Protection (DSP) Toolkit, liaising with the IM&T Security Team to ensure a consistent and co-ordinated approach.
11. To participate in the Trusts annual DSP Toolkit audit. 12. To administer the Trusts Information Asset Register, ensuring all annual reviews are undertaken (e.g., supplier due diligence, business continuity planning and testing, etc). 13. Work proactively with Information Asset Owners (IAOs) and Administrators (IAAs) to ensure information systems are risk assessed and secure, ensuring the CIA Triad of Confidentiality, Integrity and Availability can be maintained.
14. Ensure all IAOs and IAAs are appropriately briefed, trained and supported in their roles. 15. Work with the Procurement Team to undertake due diligence against each IT supplier, participating in supplier assurance audits and assisting in contract disputes were required.
16. Maintain the Trusts information flow maps between the Trust and its partner organisations providing advice and guidance where necessary. Undertake risk assessments of all information flows to ensure they do not contravene Trust policies and procedures (and therefore national guidance/legislation).
17. Support with the production and/or evaluation of Data Protection Impact Assessments (DPIAs) and Data Sharing Agreements (DSAs), providing advice to staff completing them as needed. 18. To present DPIAs and DSAs to the Data Protection Panel for review and approval.
19. Administer the Trusts Information Sharing Gateway account, ensuring DSAs are kept up-to-date and relevant. 20. Assist with the maintenance of the Trusts Record of Processing Activities. 21. To assist with the management of the IG Risk Register.
22. Supervise the process for managing, monitoring, reporting, and investigating IG and Data Protection incidents and identifying incidents that are legally required to be reported within 72- hours. 23. Provide reports on incidents to relevant meetings, ensuring trends and areas of concern are flagged up for further discussion and action.
24. Draft staff briefings in relation to findings from thematic analyses of IG and Data Protection incidents. 25. Undertake IG and Data Protection audits, analysing and presenting findings as required and assisting with the development and implementation of any actions plans.
26. Provide advice and take action in response to audit findings and recommendations. 27. To monitor the Teams shared mailboxes, allocating work to the appropriate staff as needed. 28. To act as the designated deputy and represent the Deputy Head of IG (Secondary Care) as directed at internal/external meetings.
29. To provide cover for the IG Manager (Primary Care), Information Assurance Manager and/or Records Manager during periods of leave and sickness, managing the relevant teams to ensure work continues uninterrupted and responding to any queries or concerns.
30. To network with neighbouring trusts and other organisations as appropriate and represent the Trust at local or national events. 31. To participate in any local or national professional activities in order to continue personal and professional development.
Education and Development 32. To agree and review own objectives with their line manager and to ensure a PersonalDevelopment Plan is produced. 33. Participate in regular supervision, engage in reflective practice and be committed to continueddevelopment.
34. Develop own skills and knowledge and contribute to the development of others. 35. Write, develop, and deliver clear IG and Data Protection training and awareness materials to awide range of staff across the Trust on complex and specialist topics in a way that complements the Trusts e-learning.
36. Maintain an awareness of all aspects of legislation, national guidance and policy relating to IG andData Protection.
Mersey Care NHS Foundation TrustWarrington
to share their equality information with us.
Job overview
Would...
Mersey Care NHS Foundation TrustWarrington
NHS Informatics Merseyside is looking for hardworking and enthusiastic individuals to join our Insert Team/Service. We are looking to recruit one individual into the position of Information Governance Manager (Secondary Care) on a permanent contract...
Liverpool University Hospitals NHS Foundation TrustLiverpool, 16 mi from Warrington
Job overview
An exciting opportunity for a full-time Macmillan Support Worker has arisen to join the friendly, motivated Macmillan Information support team. The service delivers a high standard of support to patients, their families, carers...