Data Protection and Governance Manager

Job Statement The post holder will lead and coordinate the Federations corporate governance, data protection, complaints, incidents and consultancy arrangements, while developing and growing ARC management and consultancy services. The role will provide expert advice internally and to external clients, including outsourced data protection, governance, policy development, audits, compliance reviews and improvement support. The role will ensure statutory, regulatory and contractual requirements are met, provide high-quality policies, audits, reviews, advice and formal responses, and translate learning into measurable improvement.

The post holder will build trusted external client relationships, identify new opportunities and support sustainable growth of ARC Management and Consultancy portfolio.

• Lead the Corporate Governance and Data Protection Framework, integrating corporate, information, risk, complaints and incident governance.
• Provide expert governance and data protection advice to the Board, Executive Team, senior managers and external clients.
• Develop and grow ARC Management and Consultancy Services, identifying opportunities for governance, data protection, compliance, audit, policy and management support.
• Deliver outsourced data protection services to external clients, including advice, compliance reviews, policy development, audits, training, action plans and ongoing assurance.
• Manage external client relationships, agree deliverables, manage expectations and ensure high-quality, timely service delivery.
• Support business development through service propositions, proposals, tenders, scopes of work and commercial discussions within delegated authority.
• Create, review and implement governance, data protection, confidentiality, complaints, incident and policies for the Federation and external clients.
• Plan and undertake data protection, governance, information governance and compliance audits, producing findings, recommendations, action plans and follow-up assurance.
• Advise on UK GDPR, Data Protection Act 2018, confidentiality, data sharing, records management, data subject rights, subject access requests and data protection impact assessments.
• Lead and support the development and submission of tenders, bids and proposals, including researching client requirements, developing service solutions, coordinating contributions, preparing high-quality tender documentation, pricing and scopes of work, ensuring submissions meet specification and deadlines, and supporting successful contract mobilisation and ongoing client relationship management.
• Manage complaints and incidents, including triage, investigation oversight, correspondence, responses, escalation, action tracking, learning and closure.
• Coordinate responses to information requests, data protection queries, subject access requests, complaints, incidents and governance enquiries, ensuring appropriate investigation and quality assurance.
• Maintain systems for recording, monitoring and reporting complaints, incidents, breaches and governance events, producing trend analysis, dashboards and reports for Boards, committees and clients.
• Monitor compliance with legislation, regulation, NHS requirements, contracts and policies, identifying gaps and coordinating remedial action.
• Maintain governance registers and assurance processes, including risk, declarations of interest and standards of business conduct.
• Lead or support audits, investigations and assurance exercises, translating findings into practical recommendations and improvement plans.
• Ensure appropriate confidentiality, information security and records-management arrangements for the Federation and client organisations.
• Identify governance and data protection risks and support managers and clients to implement and monitor mitigating actions.
• Develop and deliver governance, data protection, complaints, incident and confidentiality training and consultancy support.
• Maintain client/service records, monitor agreed deliverables and support service performance and reporting.
• Identify themes across complaints, incidents, data protection matters and audits and use these to drive improvement.
• Represent ARC and BHF professionally with external organisations, partners, regulators and other stakeholders, enhancing its reputation for governance and data protection expertise.
• Provide effective governance and meeting support to the Board, Board Committees, management and other relevant meetings, including coordinating meeting…