Information Governance Lead

Job summary

Promote. Empower. Lead. FCMS, a social enterprise for health and wellbeing services, is seeking a dedicated and forward thinking Information Governance (IG) Lead to support FCMS in ensuring that information is handled securely, legally and effectively. This is a hands on role focused on raising awareness, delivering staff training and embedding good IG practices throughout the organisation and reinforcing a positive IG culture across FCMS.

Pay: £30,426 - £34,392 per annum depending on experience and qualifications

Hours: 37 hours per week, Monday-Friday 9am 5pm (with some evening and weekend commitments for training delivery across sites and services)

Accountable to: The Head of Quality and Risk

Base: Newfield House, Vicarage Lane, Blackpool, FY4 4EW - visits across all sites for training delivery

Closing Date: 1 February 2026

Main duties of the job

We are looking for somebody passionate and proactive to champion a positive and secure culture. The role requires the ability to link together a multitude of different compliance elements within a dynamic and fast paced environment; to deliver exceptional care to our patients, who are the central focus of all that we do. This role is a key part of our Quality & Risk Team and central to maintaining the integrity, safety and resilience of our clinical and corporate systems.

Day to day duties (not exhaustive):

• Awareness, training and engagement - design and deliver engaging and practical staff training; lead initiatives to raise awareness of IG, data protection, confidentiality and records management; provide accessible advice and support to staff at all levels; champion a positive culture of compliance and good practice.
• Information governance and data protection - design and chair IG and information asset owner working groups; implement and oversee policies and frameworks that ensure data is handled responsibly, legally and securely in line with NHS, ICO and regulatory standards; provide assurance and compliance evidence to support NHS DSPT toolkit completion; support accreditation towards ISO:27001 and Cyber Essentials Plus.
• Monitoring, audit and continuous improvement - assist with IG audits and compliance checks; identify gaps, recommend improvements and support implementation; manage the audit calendar and implement actions from a 12 month IG strategic focus; oversee DPIAs, data sharing agreements, information asset registers and day to day GDPR queries.
• Data subject rights and records management - support processing of SARs, FOI requests and related complaints; assist with records management processes including retention, secure disposal and data quality audits.
• Incident response and resilience - review data/security breaches or incidents in a timely manner; support investigations; produce reports and shape response protocols and business continuity plans.
• Data sharing and contracts - review DSAs/DPAs, DPIAs and relevant contract clauses; liaise with internal and external parties on data handling and compliance.
• Cyber security support - support review of systems as part of DPIA reviews to include cyber security; assist risk assessments, audits and reviews alongside consultants.
• Internal ICT oversight - act as conduit between external ICT services and FCMS; support policy based access controls and KPI definition; assist in understanding the complex ICT infrastructure to meet IG and GDPR requirements.
• General - cover reception desk and administration tasks of Newfield House during unplanned absences; carry out any other duties delegated by the Head of Quality and Risk.

Other responsibilities include:

• Maintaining a high level of understanding of working practices and safety policies.
• Observing national and local policies in health and safety, fire and electrical safety, data security, GDPR, counter fraud, BLS, safeguarding and infection control.
• Travel to other sites and deliver training or support during out of hours settings (evenings and weekends) as required.
• Keeping all mandatory and additional training up to date.

About us

FCMS is a social enterprise providing health and wellbeing services. We are passionate about ensuring patients and callers remain the central focus of everything we do. Coupled with excellent clinical governance and operational expertise, we can strategically visualise, develop and implement award winning services.

Benefits

• UK NHS Pension
• Cycle to Work Scheme
• Career Development Opportunities
• Attendance Bonus
• Staff Benefit Scheme
• Free Tea & Coffee
• Eye Care Contributions

Key expectations

• Self awareness - living authentically.
• Adaptability - ready to adjust to the situation.
• Openness - what you see is what you get.
• Positivity - striving for the impossible.
• Generosity of spirit - everyday an opportunity to act with kindness.
• Ability to have fun - take the role seriously while being yourself.

Values

• Fun: People rarely succeed unless they are having fun. Happiness is healthy!
• Awesome: We're not here to be average; we're here to be awesome!
• Humble: We are here to make a difference to the lives of others, NOT to see how important we can become.
• Brave: We challenge the norm. We have the courage to get the difficult jobs done.
• Oompf: We have natural oompf! It's infectious.
• Go getting: We are intuitive to changing needs and respond quickly with energy, ideas and positivity.

Person Specification Qualifications Essential

• 5 GCSEs A -C/4 9 including English Language or equivalent training in management or healthcare.

Desirable

• Project management qualification.
• IG, GDPR/Data Protection or ISO related qualification.

Personal Qualities Essential

• Outgoing & enthusiastic attitude bringing passion to IG.
• Positive attitude to change and process improvement.
• Strong communication skills - able to explain IG concepts clearly.
• Confident delivering training to a range of audiences.
• Ability to build relationships, influence behaviours and support cultural change.
• Strong organisational skills and attention to detail.
• Proactive, hands on approach.
• Prepared to work towards frameworks and qualifications.
• Prepared to undertake formal workshop training/qualifications.
• Manual handling tasks required for organising filing and archive record systems & disposing of old equipment/items.
• Full UK Drivers licence required (subject to insurance requirements).

Experience Essential

• Experience delivering training or meetings to a range of audiences.
• Good knowledge of UK GDPR, Data Protection Act 2018, FOI and records management, and implementing this within a workplace.
• Ability to handle sensitive information appropriately.
• Experience communicating with non technical audiences using self awareness and emotional intelligence, adapting styles as required.
• Experience working with IT systems confidently.
• Demonstrated ability to operate in a fast paced environment.
• Demonstrated ability to meet deadlines, schedules, set goals/objectives.
• Able to demonstrate effective partnership/team working and experience working independently.
• Problem solving skills.

Desirable

• Previous experience in an IG, data protection or compliance role.
• Experience conducting DPIAs or handling information rights requests.
• Collaborative and approachable.
• Strong problem solving skills.
• Experience working with Microsoft 365 products.
• Experience working within a healthcare environment.
• Experience of Cyber Essentials or ISO 27001 or have worked towards accreditation.
• Experience writing policies and guidance.

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exemption Order) 1975 and requires Disclosure and Barring Service submission to check for any previous criminal convictions.

Employer details Employer name

FCMS

Address

Newfield House
Vicarage Lane
Blackpool
Lancashire
FY4 4EW

Employer's website

(Opens in a new tab)

£30,426 to £34,392 a year - depending on experience