IT Compliance & Information Governance Officer

As part of our continued investment in governance, information security and regulatory compliance, we are seeking an IT Compliance & Information Governance Officer to support the organisation's compliance activities across a growing portfolio of regulatory, certification and NHS requirements. This is a hands‑on role focused on maintaining our GDPR, ISO 27001, ISO 9001 and NHS Data Security & Protection Toolkit (DSPT) requirements.

You will be responsible for keeping documentation up to date, coordinating audit activity and ensuring compliance processes are operating effectively day‑to‑day. The role is operational rather than strategic, it is about keeping things organised, audit‑ready and under control.

Full‑time remote position, working Monday to Friday. It is ideally suited to someone currently working in a compliance, governance, information governance or audit support role who is looking to take the next step in their career. You will work across IT, HR and operational teams to support compliance activities and help ensure the organisation remains compliant with regulatory, contractual and NHS requirements.

Please note that occasional travel to company locations may be required for meetings, audits or business needs.

• Maintain compliance trackers including DSAR logs, DPIA registers, risk registers and DSPT action plans
• Support the annual DSPT submission and maintain audit‑ready evidence throughout the year
• Organise and maintain ISO 27001 and ISO 9001 documentation
• Coordinate audit preparation and gather evidence for internal and external audits
• Track and support DSARs, DPIAs and other data protection activities
• Monitor compliance training and follow up on completion gaps
• Support supplier due diligence and compliance assessments
• Produce compliance reports, dashboards and management information
• Identify gaps in documentation, controls or evidence and drive actions to completion
• Support compliance activities required to maintain existing NHS contracts and support future tender opportunities
• Support the organisation in responding to new regulatory, compliance and legislative requirements as they emerge

• Experience working in a compliance, governance, information governance, audit or similar support role
• Strong organisational skills and attention to detail
• Experience maintaining records, trackers, controlled documentation or audit evidence
• Ability to manage multiple deadlines, priorities and work streams
• Good understanding of GDPR and data protection principles
• Confident working across departments including IT, HR and operational teams
• Good Microsoft 365 skills, particularly Outlook, Word and Excel

• Experience with ISO 27001, ISO 9001 or similar management systems
• Experience supporting NHS DSPT compliance activities
• Exposure to DPIAs, DSARs, incident management or audit processes
• Experience with in healthcare, NHS or other regulated environments
• Information governance, compliance or audit‑related qualifications

• Compliance trackers are accurate, up to date and actively maintained
• DSPT evidence is organised and audit‑ready
• ISO documentation is current, controlled and easily accessible
• Compliance reporting is consistent, accurate and valued by management
• Compliance administration is operating effectively with minimal supervision
• Audit preparation activities are structured, efficient and well organised

Steeper Group is a privately‑owned business that was formed over 100 years ago. Since then we have expanded across prosthetics, orthotics and accessible technology – with a focus on creating significant turning points in individuals’ lives through exceptional clinical services and award‑winning products. We are a true leader in our market. From humble beginnings, we have grown to become one of the UK’s largest suppliers of Orthotic, Prosthetic and Accessible Technology products.

Uniquely, we combine age‑old craft skills with the latest innovations in manufacturing and materials. Steeper’s vision is to create life’s turning points, together. We aim to do this with innovative prosthetic, orthotic and accessible technology products and services.

Not The One For You? Check out our current opportunities – we may have the perfect role for you.