Roles and skills Digital health care job roles reference
Illustrative Reference profiles for a generic digital health care organisation, not official job descriptions. About this reference.

Information governance manager

Band 7 · Information governance officer · 490 job evaluation points

Manages the information governance service day to day, including its team, casework, assurance programme, and training.

Responsibilities

Skills

SkillExpected levelWhat this level means
Information governance and data protectionThis referencePractitioner (3)

You can:

  • lead data protection impact assessments and information sharing agreements
  • advise teams on lawful basis, consent, confidentiality, and retention
  • investigate incidents and recommend improvements
Information governance assurance and auditThis referencePractitioner (3)

You can:

  • plan and run the information governance assurance programme
  • judge whether evidence meets the standard and identify gaps
  • work with internal and external auditors
Data protection impact assessmentThis referencePractitioner (3)

You can:

  • review and advise on data protection impact assessments for complex systems
  • judge whether risks are acceptable and recommend controls
  • decide when to escalate high risks for senior or regulator review
Information governance incident managementThis referencePractitioner (3)

You can:

  • investigate serious incidents and find their root causes
  • decide, with senior colleagues, whether to notify regulators and people affected
  • share lessons and track improvements
Records retention and disposalThis referenceWorking (2)

You can:

  • apply the retention schedule to records and flag those due for review
  • prepare records for archiving or secure destruction, and keep the audit trail
Organisational risk managementThis referenceWorking (2)

You can:

  • record and update risks for your area
  • suggest controls and track actions
People managementThis referencePractitioner (3)

You can:

  • line manage a team, setting objectives and running appraisals
  • support wellbeing and manage attendance, performance, and conduct
  • plan the team's development and succession
Data ethics and privacyUK GDaD PCFPractitioner (3)

You can:

  • work with stakeholders to identify and address ethical and privacy concerns
  • demonstrate and communicate how data ethical issues fit into the wider organisational context
  • research developments in data ethics and privacy to improve compliance and processes
  • assess and constructively challenge proposed data ethics policies
Stakeholder relationship managementUK GDaD PCFPractitioner (3)

You can:

  • work with the team to develop and maintain an understanding of stakeholders
  • work with the team to develop and implement stakeholder communications strategies
  • identify and resolve issues, influence stakeholders and manage relationships effectively
  • build long-term strategic relationships and communicate clearly and regularly with stakeholders

Typical qualifications and experience

Band 7 outline

Knowledge
Highly developed specialist knowledge, typically to master's level or equivalent experience.
Autonomy
Works to organisational policy; decides how results are achieved; is the expert others consult.
Scope
Several products or services, or a specialist function.
Leadership
Leads a team or a professional practice area.
Accountability
Delivery of a service or specialist function, and its budget if held.

Job evaluation (illustrative)

FactorLevelLevel summaryPoints
Communication and relationship skills5Gives highly complex or contentious information needing developed persuasion and negotiation, presents to large groups, or communicates where there are significant barriers to acceptance.45
Knowledge, training, and experience6Specialist knowledge across the range of the specialism (postgraduate diploma level or equivalent).156
Analytical and judgemental skills4Judgements on complex facts or situations needing analysis, interpretation, and comparison of options.42
Planning and organisational skills4Plans a broad range of complex activities or strategies, adjusting them as needed.42
Physical skills3Developed skills needing speed or accuracy, such as advanced keyboard use.27
Responsibility for patient and client care1Helps patients, clients, or relatives during incidental contact.4
Responsibility for policy and service development3Implements policies for own area and proposes changes that affect other areas.21
Responsibility for financial and physical resources3Authorises payments, buys some assets or supplies, monitors or holds a delegated budget, or maintains assets.21
Responsibility for people3Manages a group of staff day to day, teaches core or specialist training, or gives core HR advice.21
Responsibility for information resources5Designs and develops major information systems, or runs information systems for several services as the main duty.34
Responsibility for research and development2Regularly does research, development, trials, or equipment and system testing as part of the job.12
Freedom to act4Results are defined, but the job holder decides how to achieve them, within broad policy.32
Physical effort1Sitting, standing, and walking, with little physical effort.3
Mental effort3Frequent concentration on unpredictable work, or occasional prolonged concentration.12
Emotional effort2Occasional exposure, or frequent indirect exposure, to distressing circumstances.11
Working conditions2Occasional unpleasant conditions, frequent travel or outdoor work, or near-continuous screen use on most days.7
Total (Band 7: 466 to 539)490

Self assessment

Rate what you do regularly now, add a short example as evidence, and plan an action for your most important gaps. Your answers are saved in this browser only.

Rated 0 of 9 skills: 0 meet the expected level, 0 below, 0 above.

Information governance and data protection Expected: Practitioner
Information governance assurance and audit Expected: Practitioner
Data protection impact assessment Expected: Practitioner
Information governance incident management Expected: Practitioner
Records retention and disposal Expected: Working
Organisational risk management Expected: Working
People management Expected: Practitioner
Data ethics and privacy Expected: Practitioner
Stakeholder relationship management Expected: Practitioner
Download blank file