About the Role
As part of our continued investment in governance, information security and regulatory compliance, we are seeking an IT Compliance & Information Governance Officer to support the organisation's compliance activities across a growing portfolio of regulatory, certification and NHS requirements.
This is a hands-on role focused on maintaining our GDPR, ISO 27001, ISO 9001 and NHS Data Security & Protection Toolkit (DSPT) requirements. You will be responsible for keeping documentation up to date, coordinating audit activity and ensuring compliance processes are operating effectively day-to-day.
The role is operational rather than strategic. It is about keeping things organised, audit-ready and under control.
This is a full-time remote position, working Monday to Friday.
The role is ideally suited to someone currently working in a compliance, governance, information governance or audit support role who is looking to take the next step in their career.
You will work across IT, HR and operational teams to support compliance activities and help ensure the organisation remains compliant with regulatory, contractual and NHS requirements.
Please note that occasional travel to company locations may be required for meetings, audits or business needs.
Your Duties and Responsibilities:
- Maintain compliance trackers including DSAR logs, DPIA registers, risk registers and DSPT action plans
- Support the annual DSPT submission and maintain audit-ready evidence throughout the year
- Organise and maintain ISO 27001 and ISO 9001 documentation
- Coordinate audit preparation and gather evidence for internal and external audits
- Track and support DSARs, DPIAs and other data protection activities
- Monitor compliance training and follow up on completion gaps
- Support supplier due diligence and compliance assessments
- Produce compliance reports, dashboards and management information
- Identify gaps in documentation, controls or evidence and drive actions to completion
- Support compliance activities required to maintain existing NHS contracts and support future tender opportunities
- Support the organisation in responding to new regulatory, compliance and legislative requirements as they emerge
To Be Successful in This Role You Will Have the Following Skills and Experience:
Essential
- Experience working in a compliance, governance, information governance, audit or similar support role
- Strong organisational skills and attention to detail
- Experience maintaining records, trackers, controlled documentation or audit evidence
- Ability to manage multiple deadlines, priorities and workstreams
- Good understanding of GDPR and data protection principles
- Confident working across departments including IT, HR and operational teams
- Good Microsoft 365 skills, particularly Outlook, Word and Excel
Desirable
- Experience with ISO 27001, ISO 9001 or similar management systems
- Experience supporting NHS DSPT compliance activities
- Exposure to DPIAs, DSARs, incident management or audit processes
- Experience within healthcare, NHS or other regulated environments
- Information governance, compliance or audit-related qualifications
What Success Looks Like
Within your first six months:
- Compliance trackers are accurate, up to date and actively maintained
- DSPT evidence is organised and audit-ready
- ISO documentation is current, controlled and easily accessible
- Compliance reporting is consistent, accurate and valued by management
- Compliance administration is operating effectively with minimal supervision
- Audit preparation activities are structured, efficient and well organised