Senior IG Officer
At a glance
- Band
- Band 6
- Contract
- Permanent
- Pattern
- Full-time, Job share, Flexible working, Home or remote working
- Posted
- 15/09/2026
- Closes
- 28/09/2026
Sponsorship verdict
This contract type is not eligible for Skilled Worker sponsorship.
NHS Trusts cannot issue a Certificate of Sponsorship for part-time, bank, locum, zero-hours, job-share or short fixed-term (under 12 months) contracts under current Home Office rules. This applies even when the wider Trust holds a Skilled Worker licence.
Role summary
The Senior Information Governance (IG) Officer will join a small team at Sheffield Teaching Hospitals NHS Foundation Trust. This role involves promoting data protection and confidentiality, ensuring the Trust meets its legal obligations. Key duties include managing complex FOI and Subject Access Requests, supporting the annual Data Security and Protection Toolkit submission, and investigating data security incidents. The officer will also act as an expert IG resource for colleagues across the Trust.
Key responsibilities
- Independently manage and process highly complex information requests, including Subject Access Requests (SARs).
- Oversee and quality-assure complex Freedom of Information (FOI) requests, ensuring statutory compliance.
- Support the annual completion and evidence-gathering for the NHS Data Security and Protection Toolkit (DSPT).
- Participate in investigations into complex data security incidents and confidentiality breaches.
- Act as an internal source of knowledge, providing advice on GDPR, Data Protection Act 2018, and Caldicott Principles.
- Facilitate and review Data Protection Impact Assessments (DPIAs) for high-risk projects.
Essential criteria
- Expert knowledge of information governance and data protection acquired through qualification to graduate degree level, or equivalent relevant experience.
- Significant experience of working in an Information Governance role.
- Experience working within an NHS organisation or similar public body, preferably an acute Trust.
- Experience of writing key information governance documents, including policies and procedures, data protection impact assessments, privacy notices, etc. Ability to tailor such documents to the specific audience.
- Experience in conducting IG related research in order to perform role, such as locating and interpreting relevant national guidance or legislation.
- Preparation of Freedom of Information Act and/or Subject Access Request responses with practical experience of the exemptions, the public interest and prejudice tests, collaborating with colleagues to finalise responses.
- Expert knowledge of GDPR, Data Protection Act 2018, Freedom of Information Act 2000, and awareness of other relevant legislation such as the Access to Health Records Act 1990.
- Knowledge of the SIRO role, its responsibilities, the inter- relationship with Information Security, Cyber Security, Information Governance and Information Assets and their Owners.
- An awareness of the NHS research process as well as the role of completing DPIAs as part of innovative or otherwise high-risk projects.
- Ability to translate complex information, including legislative details, into accessible, practical language.
- Ability to appropriately challenge and negotiate with senior members of staff where required.
- Able to work under pressure and to deadlines.
- Excellent verbal and written communication skills, with the ability to communicate effectively at all levels.
- Recognition of own personal boundaries and when to refer matters to others/senior colleagues.
- Able to manage time and priorities appropriately, operating on own initiative towards agreed objectives.
- Positive attitude towards learning and development, demonstrated by a record of continuing professional development.
Desirable criteria
- Post-graduate level qualification in a relevant discipline, or equivalent working experience.
- Professional qualification in data protection (e.g. BCS, ISEB or CIPP/E).
- Relevant accredited qualification such as BCS Practitioner Certificate in Freedom of Information.
- Preparing and coordinating evidence for the annual Data Security & Protection Toolkit submission.
- Experience in assisting and supporting colleagues with urgent response activities such a personal data breach response and urgent project / programme issues.
- Assisting in the investigation of IG incidents in line with NHS, ICO and UK GDPR requirements.
- Familiarity with document redaction using specialised software.
- Understanding of the specific structure and data challenges within a multi-site NHS Trust.
- An awareness of cyber security with some knowledge of data security frameworks e.g. Cyber Essentials, ISO 27001.
Useful to know
Agenda for Change 2024/25 pays Band 6 at £37,338 – £44,962 a year, across England.
This advert: £39,959 – £48,117 — outside the standard scale; check for HCAS/London weighting.
Posted 1d ago · Closes in 13d
Plenty of time to prepare a strong application.
Full advert · preview
Sheffield Teaching Hospitals NHS Foundation Trust
Senior IG Officer
The closing date is 28 September 2026
Job summary
The Senior Information Governance (IG) Officer will work as part of a small IG team within Sheffield Teaching Hospitals NHS Foundation Trust.
You will support the team's important work in promoting good practice around data protection and confidentiality across the Trust, working to ensure the Trust meets its statutory and legal obligations.
This will include overseeing complex Freedom of Information (FOI) requests, managing Subject Access Requests, supporting the annual Data Security and Protection Toolkit submission process, participating in data security incident investigations and generally acting as a source of expert IG knowledge for colleagues across the Trust.
Main duties of the job
Independently manage and process highly complex information requests, including Subject Access Requests (SARs) from members of the public, Trust staff, solicitors and patients, involving sensitive information.
Oversee and quality-assure complex Freedom of Information (FOI) requests, ensuring responses from clinical directorates comply with statutory deadlines.
Support the annual completion and evidence-gathering process for the NHS Data Security and Protection Toolkit (DSPT), taking part in collection and indexing of the required evidence.
Participate
Join the community to read the full pack, responsibilities and person-specification in one place.
Your seat is reserved — activate it
CareerHive is included with your CareerHive Skool community membership. If you haven't claimed your account yet, join the community (or sign in with the same email you joined with) to unlock the full advert, the apply link, HiveMind AI interview & application suite, your private vault, and daily sponsorship alerts.