We are looking for an experienced and enthusiastic Information Governance Officer to join our Information Governance function.
This is a varied, practical role supporting services across the Council to manage information responsibly, comply with statutory requirements and deal effectively with information governance risks. You will work across data protection, information rights, records management, information sharing and information governance assurance, helping colleagues apply sometimes complex requirements in a clear and proportionate way.
You will have the opportunity to work on both individual cases and wider improvements, contributing to how information governance is embedded across the Council.
What you’ll be doing
You will have a broad range of responsibilities, including:
- Providing practical information governance advice and support to services across the Council.
- Supporting Data Protection Impact Assessments and privacy risk assessments, helping services identify risks and put proportionate controls in place.
- Managing a personal caseload of complex information governance matters, including complaints, incidents and personal data breaches.
- Supporting statutory information rights requests, including Freedom of Information, Environmental Information Regulations and subject access requests, as well as internal reviews.
- Advising services on information sharing, data sharing agreements, privacy notices and lawful processing.
- Helping services maintain accurate Records of Processing Activities and understand their record-keeping responsibilities.
- Supporting records retention, disposal and archiving so that information is managed appropriately throughout its lifecycle.
- Supporting the triage, investigation and escalation of information incidents and potential personal data breaches.
- Contributing to audits, compliance reviews and assurance activity, including identifying gaps and tracking improvement actions.
- Maintaining information governance records and contributing to reporting, dashboards and assurance updates.
- Helping to review and develop policies, procedures, standards and guidance as legislation and organisational requirements evolve.
You will also work with Information Asset Owners and data protection champions, helping colleagues understand their responsibilities and manage information risks effectively.
About you
We are looking for someone who can combine a sound understanding of information governance with a practical, helpful approach.
You should have experience of applying data protection, confidentiality, records management or information governance requirements within a working environment, together with experience of supporting areas such as risk assessments, Data Protection Impact Assessments, incident reviews or breach investigations.
Experience of supporting or managing statutory information rights requests is also important. This could include Freedom of Information requests, Environmental Information Regulations requests, subject access requests or internal reviews.
You will need a good working knowledge of relevant legislation and principles, including the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018, Freedom of Information Act 2000, Environmental Information Regulations 2004 and records management principles.
What we’re looking for
You will bring:
- The ability to give colleagues clear and practical information governance advice.
- Good judgement when assessing risks and identifying proportionate controls.
- Strong written and verbal communication skills, including the ability to explain complex requirements in plain English.
- The ability to manage competing priorities and meet statutory and organisational deadlines.
- An understanding of confidentiality, data protection and information security responsibilities when handling sensitive information.
- An organised and evidence-based approach to maintaining records, decisions and actions.
- Experience of supporting audits, compliance reviews or other information governance assurance activity.
A degree-level qualification, or equivalent relevant experience in information governance, data protection, records management, information management, law, compliance or a related field, is essential. Evidence of continuing professional development is also required, while relevant professional qualifications or specialist training would be an advantage.
Why this role?
This is an opportunity to work across a wide range of Council services and build experience across the breadth of modern information governance.
Rather than focusing on a single area, you will be involved in data protection, information rights, information sharing, records management, privacy risk, incidents and corporate assurance. You will work directly with services to help turn legislative and policy requirements into approaches that are practical, consistent and sustainable.
The role also provides contact with colleagues across the Council and, where required, external partners, regulators, public bodies and technology providers on information governance matters.
If you are an information governance professional who enjoys solving problems, providing practical advice and helping colleagues manage information well, we would welcome your application.