Senior Assurance and Information Risk Manager

Contents

• Location
• About the job
• Benefits
• Things you need to know
• Apply and further information

Burnley, Leeds, London

About the job

Job summary

In the Department of Health and Social Care, we are proud of our purpose – to enable everyone to live more independent, healthier lives for longer. To achieve this, and create a great place to work, we have four values: we are inclusive, we constantly improve, we challenge, and we are agile. If this sounds like an environment you would like to work in, we would love to hear from you.

We are pleased to offer an exciting and pivotal role in the Chief Data Officer’s Directorate (CDO). The CDO’s mission is to enable the potential of our health and care data to provide robust evidence to drive better care to help people live longer, healthier lives. 

This is an exciting time to be joining, as we are a new directorate, and you will play a pivotal role in developing and delivering the department’s data strategy alongside shaping the directorate’s culture, values, and identity. 

The Assurance and Information Risk Team within CDO leads and co-ordinates information assurance, data protection compliance and information risk management activity across DHSC, its Executive Agencies and Arms-Length Bodies. This is an opportunity to innovate in a role that plays a key part in keeping DHSC safe and secure, and as we continue to develop our information governance and risk framework and capabilities, that enables us to deliver our objectives and support the business in the most efficient and effective way.

Job description

We are looking for a highly motivated self-starter to join the CDO Assurance and Information Risk team. The team sits at the heart of CDO’s Directorate with the responsibility for developing and driving forward the Department’s approach to data, ensuring CDO is setting the right pace and direction, is aligned to, and engaged with wider departmental strategic objectives, in particular working closely with system facing data policy, transformation, and technology teams within DHSC.

You will join a small team but agile team, to shape, drive and deliver on DHSC’s long-term data strategy. Your role will be pivotal to the Data Strategy team and to the CDO Leadership Team, to set the right strategic direction which enables the delivery of world class data and information management across the Department and health and care family.

Your normal place of work will be your contractual primary workplace, usually either London, Leeds, or Burnley. Within DHSC we offer non-contractual hybrid working. The expectation at present is a minimum of 60% of your working time spent in the office, enabling in person interaction and collaboration and enhancing team working, learning, and support. 

You will be asked to express a location preference during the application process. Please be aware that this role can only be worked in the UK and not overseas and some travel may be required across the DHSC estate. 

Opportunities for some working from home may be available; other flexible working options may be discussed with the hiring manager in line with individual circumstances and business need. 

There are a limited number of DHSC colleagues who have existing agreed homeworking contracts resulting from Our Future Estate Programme 2023-2024. Colleagues covered by these arrangements are eligible to apply for this role whilst continuing their agreed existing home working arrangement. Occasional travel to DHSC offices or other locations may still be required according to business need. Travel and subsistence will be provided in line with the pre-agreed homeworker arrangements.

Person specification

As part of the Assurance and Information Risk team you will build strong links with DHSC business areas and work closely with them to enable us to measure information and data protection business decisions against their associated risks, escalate non-compliance and make remediation recommendations where necessary.

You will work with others across the DHSC to gather and embed best practice and drive engagement to ensure that good information governance and data protection compliance are the heart of what DHSC does and continue to be seen as enablers. You will contribute to the development of and champion an information risk management and data protection compliance culture, strategy and mindset within DHSC, its teams and its Executive Agencies.

You will provide independent assurance to the Senior Information Risk Owner and Data Protection Officer that DHSC and its business areas are managing information risks effectively and complying with Departmental information and security policies and data protection laws.

Key role requirements:

• Support the delivery and continuing development of a DHSC wide information assurance and data protection compliance framework, proactively manage the framework, reviewing its effectiveness against changes to regulatory requirements and lessons learned.
• Deliver individual business reviews as part of the annual programme of assurance and compliance activity and develop reports identifying the compliance position, areas for improvement and working with them to put an improvement plan in place. Escalating non-compliance, and remediation recommendations when necessary.
• Deliver targeted deep dive audits and compliance assessments.
• Provide support, advice, and guidance to business colleagues to help embed information risk management into everyday working practices.
• Collate and report key information risk metrics/activities to support the team, Senior Information Risk Owner and Information Governance Committee to make informed information risk-based decisions.
• Be the single point of contact for incoming information risk requests, tracking progress, coordinating the prioritisation, and triaging process of these requests for the team.
• Work with the DHSC Information Asset Owner and Information Asset Manager community ensuring they have the information they need to maintain their information assets, their register and the Department’s Record of Processing Activity.
• Support the development of reports to the DPO, SIRO, governance forums and DHSC Executive Committee on the effectiveness of business information risk management and data protection compliance, based on assurance activity and reports from business areas.
• Work with Executive Agencies and Arms-Length Bodies to provide an oversight of their information management and data protection compliance arrangements.

Essential skills and experience

• Experience, aptitude and capability to operate within an assurance, compliance and risk management function or closely related and comparable profession.
• You will have some awareness of the legal and regulatory framework in which DHSC operates and some experience of one or more of the following:
• Auditing, assurance, compliance or risk management activity;
• Working in information assurance, data protection or risk management;
• The Data Protection Act 2018 and the UK GDPR.
• You can quickly grasp complex issues, identify relevant information, implications and risks and are able to use these skills to develop and assess practical solutions.
• You communicate confidently, with strong written and verbal communication skills with the ability to influence effectively and explain complex issues in simple terms, tailoring messages to meet the needs of different audiences.
• You are able to quickly identify key stakeholders, both internal and external, are confident in engaging and supporting them and skilled at building enduring relationships.
• You are motivated and enthusiastic and take responsibility for delivering a timely, high quality and cost-effective service with focus and energy.
• You have strong people management skills, with the ability to coordinate the activities of others and inspire and motivate teams to be fully engaged in their work.

Desirable skills and experience:

• Professional qualification in assurance;
• DP:PC (Data Protection Practitioner Certificate),
• GDPR Practitioner;
• Equivalent industry qualification; or
• the desire and will to undertake professional learning and qualification, and continuing professional development
• Experience of using SharePoint, SharePoint Lists and Power BI

Behaviours

We’ll assess you against these behaviours during the selection process:

• Working Together
• Making Effective Decisions
• Managing a Quality Service
• Communicating and Influencing

Benefits

Alongside your salary of £41,026, Department of Health and Social Care contributes £11,885 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.

• Learning and development tailored to your role
• An environment with flexible working options
• A culture encouraging inclusion and diversity
• A Civil Service pension with an employer contribution of 28.97%

Your normal place of work will be your contractual primary workplace, usually either London or Leeds. (delete/add as appropriate) Within DHSC we offer non-contractual hybrid working. The expectation at present is a minimum of 60% of your working time spent in the office, enabling in person interaction and collaboration, and enhancing team working, learning, and support.

You will be asked to express a location preference during the application process. Please be aware that this role can only be worked in the UK and not overseas and some travel may be required across the DHSC estate.

Opportunities for some working from home may be available; other flexible working options may be discussed with the hiring manager in line with individual circumstances and business need.

There are a limited number of DHSC colleagues who have existing agreed homeworking contracts resulting from Our Future Estate Programme 2023-2024. Colleagues covered by these arrangements are eligible to apply for this role whilst continuing their agreed existing home working arrangement. Occasional travel to DHSC offices or other locations may still be required according to business need. Travel and subsistence will be provided in line with the pre-agreed homeworker arrangements.

The Civil Service welcomes applications from people who have recently left prison or have an unspent conviction. Read more about prison leaver recruitment (opens in new window).

Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Contact point for applicants

Job contact :

• Name : Mark Shepherd
• Email : Mark.shepherd@dhsc.gov.uk

Recruitment team

• Email : dhscrecruitment.grs@cabinetoffice.gov.uk

Further information

If you feel your application has not been treated in accordance with the Recruitment Principles and you wish to make a complaint, in the first instance, you should contact the DHSC Central Recruitment Team at DHSCrecruitment@dhsc.gov.uk

Read Full Description