Data Protection and Governance ManagerNHS

Job summary

The post holder will lead and coordinate the Federations corporate governance, data protection, complaints, incidents and consultancy functions, while driving the development and growth of ARC management and consultancy services. They will provide expert internal and external advice across outsourced data protection, governance, policy development, audits, compliance reviews and improvement activity. The role ensures statutory, regulatory and contractual obligations are met, delivering high quality policies, reviews, formal responses and actionable learning that results in measurable improvement. A key element of the position is building trusted relationships with external clients, identifying new opportunities and supporting the sustainable expansion of the ARC Management and Consultancy portfolio.

Main duties of the job

The role will oversee the integration of corporate governance, information governance, risk management, complaints handling and incident management into a coherent and effective framework. The post holder will ensure statutory, regulatory and contractual obligations are consistently met, and that governance systems support robust decision making and organisational accountability. They will lead the creation, review and implementation of governance, data protection, confidentiality, complaints, incident and related policies for both the Federation and external clients, ensuring these remain current, legally compliant and aligned with best practice. They will maintain governance registers and assurance processes, including risk registers, declarations of interest and standards of business conduct, ensuring that documentation is accurate, timely and appropriately quality assured.

A key responsibility will be providing expert advice on UK GDPR, the Data Protection Act 2018, confidentiality, data sharing, records management, data subject rights, subject access requests and data protection impact assessments.

Job description

Job Statement

The post holder will lead and coordinate the Federations corporate governance, data protection, complaints, incidents and consultancy arrangements, while developing and growing ARC management and consultancy services. The role will provide expert advice internally and to external clients, including outsourced data protection, governance, policy development, audits, compliance reviews and improvement support.

The role will ensure statutory, regulatory and contractual requirements are met, provide high-quality policies, audits, reviews, advice and formal responses, and translate learning into measurable improvement. The post holder will build trusted external client relationships, identify new opportunities and support sustainable growth of ARC Management and Consultancy portfolio.

Key Responsibilities

Lead the Corporate Governance and Data Protection Framework, integrating corporate, information, risk, complaints and incident governance.

Provide expert governance and data protection advice to the Board, Executive Team, senior managers and external clients.

Develop and grow ARC Management and Consultancy Services, identifying opportunities for governance, data protection, compliance, audit, policy and management support.

Deliver outsourced data protection services to external clients, including advice, compliance reviews, policy development, audits, training, action plans and ongoing assurance.

Manage external client relationships, agree deliverables, manage expectations and ensure high-quality, timely service delivery.

Support business development through service propositions, proposals, tenders, scopes of work and commercial discussions within delegated authority.

Create, review and implement governance, data protection, confidentiality, complaints, incident and policies for the Federation and external clients.

Plan and undertake data protection, governance, information governance and compliance audits, producing findings, recommendations, action plans and follow-up assurance.

Advise on UK GDPR, Data Protection Act 2018, confidentiality, data sharing, records management, data subject rights, subject access requests and data protection impact assessments.

Lead and support the development and submission of tenders, bids and proposals, including researching client requirements, developing service solutions, coordinating contributions, preparing high-quality tender documentation, pricing and scopes of work, ensuring submissions meet specification and deadlines, and supporting successful contract mobilisation and ongoing client relationship management.

Manage complaints and incidents, including triage, investigation oversight, correspondence, responses, escalation, action tracking, learning and closure.

Coordinate responses to information requests, data protection queries, subject access requests, complaints, incidents and governance enquiries, ensuring appropriate investigation and quality assurance.

Maintain systems for recording, monitoring and reporting complaints, incidents, breaches and governance events, producing trend analysis, dashboards and reports for Boards, committees and clients.

Monitor compliance with legislation, regulation, NHS requirements, contracts and policies, identifying gaps and coordinating remedial action.

Maintain governance registers and assurance processes, including risk, declarations of interest and standards of business conduct.

Lead or support audits, investigations and assurance exercises, translating findings into practical recommendations and improvement plans.

Ensure appropriate confidentiality, information security and records-management arrangements for the Federation and client organisations.

Identify governance and data protection risks and support managers and clients to implement and monitor mitigating actions.

Develop and deliver governance, data protection, complaints, incident and confidentiality training and consultancy support.

Maintain client/service records, monitor agreed deliverables and support service performance and reporting.

Identify themes across complaints, incidents, data protection matters and audits and use these to drive improvement.

Represent ARC and BHF professionally with external organisations, partners, regulators and other stakeholders, enhancing its reputation for governance and data protection expertise.

Provide effective governance and meeting support to the Board, Board Committees, management and other relevant meetings, including coordinating meeting dates, preparing and circulating agendas and papers, ensuring papers are complete and appropriately quality assured, attending meetings, taking accurate minutes and maintaining action logs to ensure decisions and actions are followed through to completion.

Coordinate the preparation, collation and distribution of governance papers, reports, briefings and supporting documentation, ensuring appropriate deadlines, document control, confidentiality and quality standards are maintained.

Develop and maintain a strong professional network across governance, data protection, information governance, healthcare, compliance and related sectors, attending relevant networking events, forums, conferences and stakeholder meetings to promote BHF and ARC services, identify opportunities, share good practice and develop potential client relationships.

Represent BHF and ARC professionally at external meetings, networking events, conferences, client meetings and sector forums, promoting the organisations management, governance and outsourced data protection services and building relationships that support business development and service growth.

Knowledge, Training & Experience

Degree-level qualification or equivalent experience in governance, data protection, information governance, compliance, risk or a related discipline, with relevant continuing professional development.

Substantial knowledge of NHS governance, complaints, incident management, risk, assurance and regulatory compliance.

Working knowledge of UK GDPR, the Data Protection Act 2018, confidentiality and information governance requirements.

Experience providing outsourced governance, data protection, compliance or consultancy services to external organisations.

Experience developing and implementing policies, procedures, governance frameworks and compliance documentation.

Experience planning and delivering governance, data protection or compliance audits and producing action-focused reports.

Experience managing complaints, incidents, investigations and formal responses.

Experience producing reports, dashboards and analysis for senior leaders, Boards, committees or clients.

Experience supporting business development, proposals, tenders, scopes of work and client relationship management.

Ability to interpret legislation, contracts, policies and governance data and convert these into clear advice and recommendations.

Experience of coordinating formal governance meetings and providing effective meeting secretariat support, including agenda planning, preparation and collation of papers, minute taking, action tracking and follow-up reporting.

Experience of developing and maintaining professional networks and representing an organisation at external meetings, forums, conferences, networking events or stakeholder groups.

Skills & Competencies

Excellent written and verbal communication, including drafting policies, audit reports, formal responses, proposals and client briefings.

Strong analytical and judgement skills, including assessment of risk and complex evidence.

Strong organisational and project-management skills across competing internal and external client priorities.

Strong consultancy and client-management skills, building trusted relationships and delivering practical solutions.

Confident business development, influencing and facilitation skills.

High standards of confidentiality, discretion, professional integrity and information security.

Ability to present complex governance, data protection, complaints, incident and audit information clearly to senior leaders and clients.

Proficient in digital systems and Microsoft Office for registers, analysis, reports, policies and controlled documentation.

Commercially aware, proactive and able to balance client service, quality, risk, deadlines and agreed scope.

Excellent organisational and meeting-management skills, with the ability to coordinate agendas, compile complex papers, take accurate minutes, maintain action logs and ensure actions and decisions are followed up within agreed timescales.

Ability to build and maintain a strong professional network, represent BHF and ARC confidently in external forums and networking environments, identify potential business opportunities and develop productive relationships with prospective and existing clients.

About us

Barnsley Healthcare Federation (BHF) is a collaborative, GPled organisation that supports primary care across Barnsley by providing highquality clinical services, governance expertise and operational support to local practices and system partners. It delivers a wide range of services including extended access, urgent care, specialist clinics, workforce development, digital innovation and practice support, all designed to strengthen general practice and improve patient outcomes. BHF works closely with PCNs, the ICB and wider health and care partners to ensure resilient, safe and effective primary care provision. Alongside its operational services, the Federation also provides specialist governance, dataprotection and consultancy support through ARC Management and Consultancy Services, helping practices and external organisations meet regulatory requirements, improve compliance and enhance organisational performance. BHF is recognised for its strong governance standards, collaborative approach and commitment to improving healthcare for the Barnsley population.