Governance & Compliance Officer

We are seeking a motivated and reliable Governance & Compliance Officer to support our Medical Director and Integrated Governance Committee (IGC). This role supports the day‑to‑day coordination of Suffolk Primary Care's governance and compliance activity across our growing primary care organisation.

We are looking for someone who has strong organisational skills, attention to detail, and the ability to work supportively across multiple teams and priorities. The ideal candidate will have excellent verbal and written communication skills and the ability to manage multiple priorities to meet deadlines. Experience working within a GP surgery or NHS setting, as well as part of a governance team, is desirable but not essential.

We offer a competitive salary along with various employee benefits, and the opportunity to join the NHS pension scheme.

The successful candidate will play a key role in ensuring our governance processes run smoothly and efficiently.

Key responsibilities include:

• Providing administrative and coordination support for CQC compliance.
• Managing incident reporting as the lead for our incident reporting system Datix.
• Acting as the principal liaison with our Data Protection Officer (DPO) team to uphold robust data protection and UK GDPR standards across the organisation.
• Leading the preparation and successful submission of the annual NHS Data Security and Protection Toolkit (DSPT).

Suffolk Primary Care (SPC) is a forward‑thinking partnership of GP surgeries across Suffolk. Our collaborative approach enables doctors and staff to share resources, ensuring the continued delivery of high‑quality healthcare.

We are committed to equal employment opportunities and encourage applications from all qualified individuals.

Benefits of Working with SPC

• Defined benefits scheme
• Life insurance
• Family benefits, including adult dependents & children's pensions
• Ill health benefits

Electric Car Salary Sacrifice Scheme

• Fully comprehensive insurance, servicing, tyres & breakdown cover
• Up to £2,000 annual SPC contribution (subject to conditions)

Flexible Working Arrangements

GP remote working options to accommodate personal commitments

Additional Benefits

• Health service discounts, including a complimentary Blue Light Card for new starters
• Minimum 33 days annual leave (inclusive of bank holidays) for full‑time employees, with enhancements for long service
• Enhanced maternity & paternity terms
• Salary sacrifice schemes for technology, homewares (Currys, John Lewis, Decathlon), cycling, and gym memberships

At SPC, we invest in our staff's professional growth and well‑being, fostering a positive work environment that benefits both our team and the communities we serve.

• Inspection Readiness – Support preparation for CQC inspections and external visits; support implementation and monitoring of required actions following inspections or audits.
• Committee Support – Prepare the agenda, produce reports, provide comprehensive support to the Medical Director for monthly IGC meetings.
• Policy Management – Oversee the centralised review, update, implementation, and communication of all governance policies and procedures across SPC practices.
• Audits – Conduct regular audits and self‑assessments against CQC and local Integrated Care Board (ICB) requirements.
• Datix Management – Act as system lead for incident reporting system (Datix); provide technical support, written guidance, staff training to ensure high‑quality, integrated incident reporting.
• Maintain the corporate risk register – Maintain risk register, ensuring robust mitigation plans; monitor Significant Event Analyses (SEAs), incidents, and complaints; identify trends; ensure shared learning embedded across practices.
• Information Governance & Data Protection – Act as primary conduit between SPC and DPO team; foster proactive relationship; manage data incidents; support DPIAs; seek expert guidance on complex IG matters.
• DSPT – Lead preparation, compliance, submission of NHS Data Security and Protection Toolkit (DSPT); consulting DPO team to ensure standards met.
• Subject Access & FOI – Support practices in processing SARs, FOI requests; liaise with…