Act as the Trust’s statutory Data Protection Officer, ensuring compliance with UK GDPR and relevant legislation.

Provide independent, expert advice to the Board, SIRO, and Caldicott Guardian on data protection risks and requirements.

Serve as the primary contact for the Information Commissioner’s Office (ICO) and data subjects.

Lead development and assurance of Information Governance policies, procedures, and strategies.

Oversee delivery of the Data Security and Protection Toolkit and wider compliance activities.

Advise on Data Protection Impact Assessments (DPIAs), information sharing agreements, and contracts.

Lead or support investigations into data breaches and complex IG incidents.

Provide assurance on data protection aspects of cybersecurity and digital initiatives.

Produce reports and briefings for Board and governance committees.

Line manage and develop the Information Governance and Records Management team.

Working for our organisation

Lincolnshire Partnership NHS Foundation Trust provides mental health services and a number of learning disability, autism and social care services in the county of Lincolnshire. Employing around 2,900 staff, and serving a population of over 768,400, our people lie at the heart of everything we do.

You could be part of a Trust rated by staff as one of the best mental health and learning disability trusts in England. We firmly believe the key to high quality care is a contented workforce. This is reflected in our Care Quality Commission rating of ‘outstanding’ for well-led and ‘good’ overall. In the most recent National NHS Staff Survey, our staff rated us as the number one trust nationally for staff morale and one of the top scoring NHS Trusts in the Midlands for being compassionate and inclusive. We’re really proud of this!

We offer options for flexible working and provide a wide range of training and promotion opportunities in all professions. We support and celebrate diversity, have active staff networks groups and are always looking at what more we can do to support our staff.

We can also offer you many staff benefits to help support you which include:

• Early access to Psychological Therapies and Physiotherapy
• Competitive annual leave allowance
• Car leasing scheme
• NHS pension scheme
• Free eye tests
• Money saving options through our salary sacrifice scheme
• Discounts on major high street retailers and restaurants

Person specification

Qualifications

Essential criteria

• Educated to Masters Degree level, studying towards a Masters level degree or demonstrable and relevant equivalent experience in Information Governance or Information Security or Records Management field
• On-going professional development in data protection and security management field

Desirable criteria

• Change Management experience
• Specialist project management qualification or demonstrable experience (e.g. Prince 2 accredited or an equivalent methodology)
• Evidence of ongoing training and development

Experience

Essential criteria

• In depth knowledge and expertise in data security, information governance and information security preferably in an NHS or public sector environment
• Dynamic and confident at presentations and able to demonstrate ability Experienced delivery of the Data Security and Protection Toolkit

Desirable criteria

• Experience of achieving high levels of assurance at audit

Skills

Essential criteria

• Clear demonstrable understanding of the Data Protection Act and GDPR Regulation, Records of Processing and the principles of Information Asset Management
• Highly developed knowledge of structured project management methodologies, gained through either formal training or practical experience
• Able to manage project and financial resources effectively, motivating staff to meet tight deadlines
• Highly developed organisational and planning skills, with the ability to co-ordinate a number of work streams across different functions
• Able to apply focused concentration for prolonged periods in developing complex strategies or legislation assessments, writing reports or analysing project status
• Able to introduce change, often requiring the need to overcome significant barriers in introducing new working practices
• Able to receive and assimilate complex and conflicting information from a variety of sources to bring together in an overall coherent and organised project plan
• Ability to communicate complex plans and concepts in simple terms to non-technical audiences
• Analytical thinker and problem solver, able to analyse complex, cross-functional/external dependencies to factor into achievable plans
• Able to receive and understand complex and often conflicting information in national initiatives or legislation
• Able to articulate complex data protection or technical (IT) issues simply to any involved parties
• Excellent ability to communicate verbally and in writing to audiences at all levels. Comfortable in presenting complex ideas to large mixed audiences, with ability to effectively present to a live audience of 200 or more, for training purposes

Desirable criteria

• Someone who can motivate and lead