Freedom of Information & Information Governance Officer

Senior Freedom of Information & Information Governance Officer 7 Main area Information Governance

Grade 7 Contract Permanent Hours Full time - 37.5 hours per week Job ref 321-CORP-8314829-B7 Site John Radcliffe Town Oxford Salary £49,387 - £56,515 per annum pro rata Salary period Yearly Closing 13/10/2026 23:59 Interview date 26/10/2026

Oxford University Hospitals NHS Foundation Trust is one of the largest NHS teaching trusts in the country. It provides a wide range of general and specialist clinical services and is a base for medical education, training and research.

The Trust comprises of four hospitals - the John Radcliffe Hospital , Churchill Hospital and Nuffield Orthopaedic Centre in Headington and the Horton General Hospital in Banbury.

Our values, standards and behaviours define the quality of clinical care we offer and the professional relationships we make with our patients, colleagues and the wider community. We call this Delivering Compassionate Excellence and its focus is on our values of compassion, respect, learning, delivery, improvement and excellence.

Many of our recruitment programmes use Value Based Interviewing to identify those who have the skills we seek, who share our values and who are able to deliver compassionate excellence from the outset. We know that this makes a significant difference to your job satisfaction and above all the outcomes and experience of our patients and their families. For more information about our Values and Value Based Interviewing please visit

Job overview

The post holder will support the delivery of the Trust's Information Governance (IG) framework by working closely with the Head of Information Governance on key operational areas including compliance monitoring, policy development, and incident management. The role involves undertaking audits and site visits across clinical and corporate areas to assess compliance with IG policies, developing recommendations to address risks, and reporting progress to governance groups. The post holder will contribute to the development and maintenance of Trust-wide IG policies and ensure they are effectively implemented and regularly reviewed. As a subject matter expert, they will provide advice on Data Protection Impact Assessments, support IG elements of Trust projects, and lead on the management of IG incidents, including escalation of reportable breaches to the DPO and SIRO. They will also maintain key IG assets such as the Information Asset Register, support Information Asset Owners in meeting their responsibilities, and lead the development and delivery of IG training programmes. Working collaboratively with the Head of Information Governance, the post holder will take ownership of specific projects and workstreams, providing a flexible and resilient resource to meet the Trust's evolving IG requirements.

Main duties of the job

The post holder will support the delivery of the Trust's Information Governance (IG) framework by working closely with the Head of Information Governance on key operational areas including compliance monitoring, policy development, and incident management. The role involves undertaking audits and site visits across clinical and corporate areas to assess compliance with IG policies, developing recommendations to address risks, and reporting progress to governance groups. The post holder will contribute to the development and maintenance of Trust-wide IG policies and ensure they are effectively implemented and regularly reviewed. As a subject matter expert, they will provide advice on Data Protection Impact Assessments, support IG elements of Trust projects, and lead on the management of IG incidents, including escalation of reportable breaches to the DPO and SIRO. They will also maintain key IG assets such as the Information Asset Register, support Information Asset Owners in meeting their responsibilities, and lead the development and delivery of IG training programmes. Working collaboratively with the Head of Information Governance, the post holder will take ownership of specific projects and workstreams, providing a flexible and resilient resource to meet the Trust's evolving IG requirements.

Working for our organisation

Oxford University Hospitals NHS Foundation Trust is one of the largest NHS teaching trusts in the country. It provides a wide range of general and specialist clinical services and is a base for medical education, training and research. The Trust comprises four hospitals - the John Radcliffe Hospital, Churchill Hospital and Nuffield Orthopaedic Centre in Headington and the Horton General Hospital in Banbury. For more information on OUH please view OUH At a Glance by OUHospitals - Issuu

Our values, standards and behaviours define the quality of clinical care we offer and the professional relationships we make with our patients, colleagues and the wider community.

We call this Delivering Compassionate Excellence and its focus is on our values of compassion, respect, learning, delivery, improvement and excellence.

These values put patients at the heart of what we do and underpin the quality healthcare we would like for ourselves or a member of our family. Watch how we set out to deliver compassionate excellence via the OUH YouTube channel.

Detailed job description and main responsibilities

• Ensure appropriate evidence is captured for audit and submission for IG related assertions within the Data Protection Security Toolkit (DSPT) external assessment. Provide support to the Head of IG in coordinating the completion of the DSPT including; identifying requirements, evidence and gaps, structuring the action plan, ensure appropriate evidence is available and that the assessment is submitted within the required deadline.
• Develop recommendations to resolve issues of non-compliance in the Trust offering a range of options which are suitable both for service provision and for legislative compliance.
• Monitor and audit compliance with policies and procedures across the Trust through site visits, including inpatient, outpatient and corporate areas, initiating actions to address areas of non-compliance and reporting on progress and risks to the IG Manager and governance groups.
• Write, implement, review and update Trust wide Information Governance policies, guidelines, protocols, procedures and processes to ensure safe and effective management of information across the Trust. Overall responsibility for IG policies remains with the IG Manager.
• Provide advice and monitoring on Data Protection Impact Assessments (DPIAs) and...