Information Governance Officer

Our client, a London based University, are looking for an Information Governance Officer. The successful candidate will lead this work reporting to the Chief Information Officer, ensuring legal compliance with relevant data protection legislation (including but not limited to UK GDPR, PCI-DSS and OfS requirements) driving improvements in compliance through systems, frameworks, policies, and standards. They will support and operate in conjunction with university leadership, data owners and data stewards whilst contributing to the strategic effort on promoting the benefits of a data-enabled culture within the University.

Higher Education experience is strongly preferred for this role, although the client would look outside if this if the candidate worked in relevant organisations.

Duties and Responsibilities:

• Responsible for developing university wide polices and ensuring compliance with relevant data protection regulations. Responsible for institutional data protection standards, policies and procedures are in place with appropriate monitoring.
• Responsible for the adoption of best practice across the organisation by leading, promoting and exploiting data, specifically leading cross cutting work in the following areas:

-Ensuring institutional policies, procedures and asset registers are up to date- Promoting a culture change in relation to data governance, ownership, and stewardship-Leading the development and implementation of data quality standards and procedures to ensure the accuracy, completeness, and reliability of university data-Working with senior stakeholders to establish data quality metrics and monitor ongoing data quality improvements.-Supporting ongoing and future projects, defining the standards for data control and quality-Leading periodic audits of departmental data and information polices ensuring regulatory, institutional and departmental compliance.

• Working with key stakeholders, data stewards to create, maintain and enhance institutional frameworks and principles to ensure a consistent and appropriate approach to information governance and management that support informed decision making.
• Provides expert information and data governance advice to the CIO including but not limited to the following areas:

-Risk reduction through establishing operational controls / guidelines / frameworks / protocols / audits

- Actively promotes the drive to culture change in relation to data driven behaviours that will be critical in meeting many of the University’s strategic objectives.Acts as the institutional lead for all internal and external data privacy requests,

• Ensures the integrity and continuity of the University’s core data assets and data artifacts, in respect of quality control and transparency throughout the data lifecycle from record generation to subsequent disposal or archival.
• Provides expert advice for Data Owners and Data Stewards with supporting their interpretation and use of policies, standards, and principles to enable them to both exploit and protect data resources appropriately.
• Oversees the delivery of knowledge and new skills for the University to build on the institutional capability that is data asset management.
• On an ongoing basis, take joint decisions with and provide expert advice and guidance to the CIO, University Executive and Committees in order to facilitate their decision making in areas of specialist knowledge as described above.
• Represent the Information Governance function on behalf of the CIO on relevant committees and programmes where appropriate and keep abreast of relevant development in the sector.

Knowledge and Experience:

• Knowledge of the legal and regulatory framework governing data protection, freedom of information and records management
• Experience in a team responsible for compliance with the Data Protection Legislation
• Experience of responding to Freedom of Information and Environmental Information Regulation requests
• Experience of reviewing Data Protection Impact Assessments and recommending risk mitigations
• Experience of applying the Data Protection Legislation to real world scenarios, including handling third party data requests, applying exemptions, and considering of risks to individuals’ rights and freedoms
• Experience of reviewing and drafting Privacy Notices, Data Sharing and
• Processing Agreements and related materials
• Experience of data breach investigation, considering risks to individuals’ rights and freedoms
• The ability to pragmatically apply the Data Protection Legislation to real world scenarios in a Higher Education setting
• The ability to recognise where exemptions to the Data Protection and Information Management Legislation may apply and to consider if and how those exemptions should be engaged
• The ability to review and draft Data Sharing Agreements and Data Processing Agreements, and data protection clauses in other Agreement
• The ability to review and draft Privacy Notices

Please apply online today if you have the relevant skills and experience for this role.