Information Security Manager in Kent

Reporting to the Group Data Protection Officer, you will play a key role in ensuring compliance with data protection legislation, strengthening the organisation’s information governance framework and promoting a positive data protection culture., * Implement streamlined DPIA and LIA processes, supporting assessments and advising on appropriate mitigation strategies. \n

• Develop, review and update information governance and data protection procedures and guidance. \n

• Ensure projects embed data protection by design and by default. \n

• Provide training and guidance on data protection and information governance matters. \n

• Work closely with stakeholders to ensure data handling processes comply with relevant legal and regulatory requirements. \n

• Support third-party supplier security and compliance assessments and help identify areas for security improvement. \n

• Provide advice and challenge around data protection legislation and cyber security. \n

• Support the Group DPO with audits to assess compliance with information governance policies and procedures. \n

• Extensive experience within an Information Governance role within the healthcare environment \n

• A deep understanding of NHS Information Governance and Caldicott principles. \n

• Strong knowledge of GDPR, ISO 27001 and PCI DSS requirements. \n

• Experience supporting information governance programmes, including risk management activities. \n

• Experience of third-party audit and compliance management. \n

• A Data Protection qualification such as GDPR Practitioner Certification would be desirable. \n

• Strong stakeholder management and communication skills, with the ability to communicate effectively with both technical and non-technical audiences. \n

• A methodical, thorough and highly organised approach. \n

• The ability to work calmly and collaboratively in a fast-paced environment. \n