Data Protection and Governance Manager
| Company: | NHS Jobs |
|---|---|
| Salary: | £35,000 - £39,000 |
| Hours: | Full-time |
| Location: | Barnsley, S71 5PN |
| Job type: | Permanent |
| Posting date: | 14 Aug 2026 |
| Closing date: | 31 Aug 2026 |
Summary
Job Statement The post holder will lead and coordinate the Federations corporate governance, data protection, complaints, incidents and consultancy arrangements, while developing and growing ARC management and consultancy services. The role will provide expert advice internally and to external clients, including outsourced data protection, governance, policy development, audits, compliance reviews and improvement support. The role will ensure statutory, regulatory and contractual requirements are met, provide high-quality policies, audits, reviews, advice and formal responses, and translate learning into measurable improvement. The post holder will build trusted external client relationships, identify new opportunities and support sustainable growth of ARC Management and Consultancy portfolio. Key Responsibilities Lead the Corporate Governance and Data Protection Framework, integrating corporate, information, risk, complaints and incident governance. Provide expert governance and data protection advice to the Board, Executive Team, senior managers and external clients. Develop and grow ARC Management and Consultancy Services, identifying opportunities for governance, data protection, compliance, audit, policy and management support. Deliver outsourced data protection services to external clients, including advice, compliance reviews, policy development, audits, training, action plans and ongoing assurance. Manage external client relationships, agree deliverables, manage expectations and ensure high-quality, timely service delivery. Support business development through service propositions, proposals, tenders, scopes of work and commercial discussions within delegated authority. Create, review and implement governance, data protection, confidentiality, complaints, incident and policies for the Federation and external clients. Plan and undertake data protection, governance, information governance and compliance audits, producing findings, recommendations, action plans and follow-up assurance. Advise on UK GDPR, Data Protection Act 2018, confidentiality, data sharing, records management, data subject rights, subject access requests and data protection impact assessments. Lead and support the development and submission of tenders, bids and proposals, including researching client requirements, developing service solutions, coordinating contributions, preparing high-quality tender documentation, pricing and scopes of work, ensuring submissions meet specification and deadlines, and supporting successful contract mobilisation and ongoing client relationship management. Manage complaints and incidents, including triage, investigation oversight, correspondence, responses, escalation, action tracking, learning and closure. Coordinate responses to information requests, data protection queries, subject access requests, complaints, incidents and governance enquiries, ensuring appropriate investigation and quality assurance. Maintain systems for recording, monitoring and reporting complaints, incidents, breaches and governance events, producing trend analysis, dashboards and reports for Boards, committees and clients. Monitor compliance with legislation, regulation, NHS requirements, contracts and policies, identifying gaps and coordinating remedial action. Maintain governance registers and assurance processes, including risk, declarations of interest and standards of business conduct. Lead or support audits, investigations and assurance exercises, translating findings into practical recommendations and improvement plans. Ensure appropriate confidentiality, information security and records-management arrangements for the Federation and client organisations. Identify governance and data protection risks and support managers and clients to implement and monitor mitigating actions. Develop and deliver governance, data protection, complaints, incident and confidentiality training and consultancy support. Maintain client/service records, monitor agreed deliverables and support service performance and reporting. Identify themes across complaints, incidents, data protection matters and audits and use these to drive improvement. Represent ARC and BHF professionally with external organisations, partners, regulators and other stakeholders, enhancing its reputation for governance and data protection expertise. Provide effective governance and meeting support to the Board, Board Committees, management and other relevant meetings, including coordinating meeting dates, preparing and circulating agendas and papers, ensuring papers are complete and appropriately quality assured, attending meetings, taking accurate minutes and maintaining action logs to ensure decisions and actions are followed through to completion. Coordinate the preparation, collation and distribution of governance papers, reports, briefings and supporting documentation, ensuring appropriate deadlines, document control, confidentiality and quality standards are maintained. Develop and maintain a strong professional network across governance, data protection, information governance, healthcare, compliance and related sectors, attending relevant networking events, forums, conferences and stakeholder meetings to promote BHF and ARC services, identify opportunities, share good practice and develop potential client relationships. Represent BHF and ARC professionally at external meetings, networking events, conferences, client meetings and sector forums, promoting the organisations management, governance and outsourced data protection services and building relationships that support business development and service growth. Knowledge, Training & Experience Degree-level qualification or equivalent experience in governance, data protection, information governance, compliance, risk or a related discipline, with relevant continuing professional development. Substantial knowledge of NHS governance, complaints, incident management, risk, assurance and regulatory compliance. Working knowledge of UK GDPR, the Data Protection Act 2018, confidentiality and information governance requirements. Experience providing outsourced governance, data protection, compliance or consultancy services to external organisations. Experience developing and implementing policies, procedures, governance frameworks and compliance documentation. Experience planning and delivering governance, data protection or compliance audits and producing action-focused reports. Experience managing complaints, incidents, investigations and formal responses. Experience producing reports, dashboards and analysis for senior leaders, Boards, committees or clients. Experience supporting business development, proposals, tenders, scopes of work and client relationship management. Ability to interpret legislation, contracts, policies and governance data and convert these into clear advice and recommendations. Experience of coordinating formal governance meetings and providing effective meeting secretariat support, including agenda planning, preparation and collation of papers, minute taking, action tracking and follow-up reporting. Experience of developing and maintaining professional networks and representing an organisation at external meetings, forums, conferences, networking events or stakeholder groups. Skills & Competencies Excellent written and verbal communication, including drafting policies, audit reports, formal responses, proposals and client briefings. Strong analytical and judgement skills, including assessment of risk and complex evidence. Strong organisational and project-management skills across competing internal and external client priorities. Strong consultancy and client-management skills, building trusted relationships and delivering practical solutions. Confident business development, influencing and facilitation skills. High standards of confidentiality, discretion, professional integrity and information security. Ability to present complex governance, data protection, complaints, incident and audit information clearly to senior leaders and clients. Proficient in digital systems and Microsoft Office for registers, analysis, reports, policies and controlled documentation. Commercially aware, proactive and able to balance client service, quality, risk, deadlines and agreed scope. Excellent organisational and meeting-management skills, with the ability to coordinate agendas, compile complex papers, take accurate minutes, maintain action logs and ensure actions and decisions are followed up within agreed timescales. Ability to build and maintain a strong professional network, represent BHF and ARC confidently in external forums and networking environments, identify potential business opportunities and develop productive relationships with prospective and existing clients.