Shane Murphy Mbcs Email & Phone Number

Birmingham, Gb

Birmingham, United Kingdom

Provision of objective advice on GDPR and Data Protection Act Compliance to senior management. Performing the roles of Data Protection Officer and Head of Information Governance. Management and investigation of personal data breaches. Review of policies and procedures including DPIA, ROPA, DSAR's. Conduct of spot checks, audits and risk management with the support of the Information Governance Team.

Uk

Provision of specialist Information Governance and Security consultancy services to Sainsbury's Supermarkets Ltd., World Bank, higher education and the public sector, including health service organisations and government e.g.,University College London; Anglia Ruskin University; Kingston University; St George’s University London, Government of Lesotho; UCLH NHS Foundation Trust; Royal Brompton & Harefield NHS Foundation Trust; Central & North West London NHS Foundation Trust; Camden & Islington NHS Foundation Trust, Lambeth PCT and Wolverhampton City PCT.

55-59 Gordon Square, Wc1H 0Nt

Responsible for guidance and advice in the implementation of an information governance framework to comply with NHS Information Governance Toolkit requirements for the cohort studies. Submission and presentation of papers and reports to the CLS Information Governance Steering Group. Working with IoE IT ISO27001 Lead in relation to the ISO27001 project. Implementation of the information governance and security initiatives into operational deployment. Consultancy advice in respect of Information Governance concerning merger with UCL in December 2014. Auditing of external suppliers to provide assurance across the IG agenda for the CLS SIRO and IG Lead.

Stoke-On-Trent, United Kingdom

Provision of advice on the whole spectrum of Information Governance Management including confidentiality, Data Protection Act 2018, GDPR 2016; Freedom of Information Act 2000, Cyber Security, Information Security and elements of ISO27001/2, Corporate Governance, Incident Management, Network and Information System Regulations, Data Security and Protection Toolkit

Chelmsford, United Kingdom

Provision of GDPR consultancy services working with the Head of Risk & Compliance. FOI and DPA advisory to colleagues within the University. Introduction and maintenance of information governance related policies, guidance and procedures.

Ilford, United Kingdom

Provision of GDPR consultancy services including drafting of privacy notices and implementing and conducting risk assessments on data flow mapping for People directorate (Social Services)

Kingston Upon Thames, United Kingdom

GDPR consultancy including setting up Project Board and Working Party ToR, introduction of tools to assess data flow risks, formulation of a project plan. Supporting the I&TS Risk & Governance Manager and Head of Legal Services on GDPR compliance requirements.

London Sw17

Providing a subject matter expert consultancy including provision of GDPR advisory services, PID and formulation of project plans using MS Project, setting up ToR for Project Board and Working Party. Reporting to the Project Board on GDPR progress. Supporting the SIRO and working closely with the four research institute IG leads. Provision of IG solutions for hosted secondary use projects involving multiple stakeholders, troubleshooting and IG quality assurance of the IG Toolkit, providing training, guidance and mentoring to members of staff.

Providing a subject matter expertise (SME) consultancy including the provision of a gap analysis for existing ICT infrastructure, operational control and resource capability to facilitate an upgrade of IFMIS from EPICOR 7.3.5 to EPICOR 10. Advice, guidance and recommendations provided on appropriate infrastructure, operational controls and resource requirements. Recommendations of ISO27002 controls and implementation of ITIL standards.

Hackney

Act as the Council’s Lead Authority on ICT security, providing and maintaining up to date expertise/knowledge covering all aspects of security of the ICT infrastructure including PSN, networks, hardware, operating systems, virtualisation technologies, software, applications hosting, telephony services, print services, web services, connectivity, backups and recovery. Define, implement and maintain the Council’s ICT Security Policy and other related policies. Manage the Security and Risk Analyst and supervise colleagues and manage the team workload.

1 Lower Marsh, Waterloo, London Se1 7Nt

Providing consultancy including provision of IG assurance solutions for projects involving multiple health and social care stakeholders providing data flow risk assessments, standard operating procedures and terms of reference. Troubleshooting and IG quality assurance of CCG IG toolkits in respect of IG Management Assurance, Confidentiality and Data Protection Assurance, Information Security Assurance, Clinical Information Assurance and providing guidance and mentoring to members of staff.

High Wycombe And Oxford

Involved in promotion of the Information Governance agenda within the CSU and supporting the client base of 14 Clinical Commissioning Groups. Provision of awareness training to staff across the client base. Obtaining, drafting and producing supporting Information Governance Toolkit evidence for CCG Boards. Confidentiality audits performed for CCGs. Cyber Security IG Risk Assurance briefing paper drafted for CCGs. Training and mentoring of IG Team staff.

Central London

Responsible for introducing an information governance framework and provision of guidance and template documentation for clinical researchers to comply with NHS Information Governance Toolkit. Recommended training and development of the SIRO and IG Lead. Training of 200 staff, including administration of the IG Training Tool. Drafting and advice for the Identifiable Data Handling Service (IDHS) standard operating procedures. Submission and presentation of papers and reports to the IDHS Board including implications of the Caldicott 2 report. Implementation of the information governance and security initiatives into operational deployment. Member of the UCL Partners SME IG Group; London Connect Information Governance Community Forum and NHS HE Forum IG Working Group.

London, United Kingdom

Provision of consultancy advice in relation to NHS Code of Connection (IGSOC) and ad hoc information security and information governance matters.

London, United Kingdom

Responsible for communication with suppliers and reporting on their progress on identified and agreed ISO27001 controls to senior management. Risk assessment and application of Information Security knowledge to deliver mutually acceptable controls to ensure risks are reduced and closed.

Nottinghamshire Health Informatic Services

Project management of ISO27001 to develop an ISMS. Alignment of ISO27002 controls to business processes. Drafted standard operating procedures and work instructions.

Newport, Iow

Managed a team of interim consultants on a risk management project to identify data flows and provide critical management information for the Commissioner and Provider split of the Trust. Identification of risks and provision of risk treatment plans. Provision of ad hoc Data Protection Act, Information Governance and Information Security advice.

Provision of Information Security Services in line with ISO27001. Re-drafting and drafting of ICT security policies. Consultancy advice on NHS Information Governance Toolkit and in addition the training of new and existing staff to heighten awareness of their responsibilities. Local Government consultancy advice on Best Value Reviews; EU Procurement for ICT Services and ICT contracts.

Responsible for Information Governance and the associated strategy and work program. Working in conjunction with the Trust’s Caldicott Guardian and taking the lead role at joint meetings for Clinical and Information Governance. Reporting to the Trust’s Information Management Board and Information Governance Group on a frequent basis in respect of the work program. Management of various outsourced contracts including LogicaCMG, General Electric Healthcare and private patient contracts. Recommendation of Information Governance contractual clauses to the Trust’s Risk Manager and Contract’s Manager. Close liaison with Connecting for Health in relation to NHS security requirements in respect of the National Programme. Provision of Information Governance training to all new staff and refresher courses to existing staff.

§ Responsible for Information Governance and the associated strategy and work program. Working in conjunction with the Trust’s Caldicott Guardian and taking the lead role at joint meetings for Clinical and Information Governance. Reporting to the Trust’s Information Management Board and Information Governance Group on a frequent basis in respect of the work program. Management of various outsourced contracts including LogicaCMG and General Electric Healthcare. Recommendation of Information Governance contractual clauses to the Trust’s Risk Manager and Contract’s Manager. Close liaison with Connecting for Health in relation to NHS security requirements in respect of the National Programme. Provision of Information Governance training to all new staff and refresher courses to existing staff.

A professional IT Procurement and Security manager with over 15 years experience gained in the public sector. Proven ability to consistently deliver results. Excellent people skills to ensure good working relationships on an internal and external basis. High levels of energy and enthusiasm to obtain continuous service improvement. A strong team player, leader by example, inspiring others towards shared goals. Aptitude to develop security policy, procedures and processes to suit constantly evolving organisations

Hnc, Business Studies

Activities and Societies: British Computer Society, Information Governance and Caldicott Guardian Forums

Education record