Information Governance Manager
Remote/Hybrid – Occasional need to travel to Head Office in Matlock (DE4 3YH) for meetings (1-2 days a month)
Permanent contract, part time, 25 hours per week
£44,000 - £48,000 per annum pro rata
Join YHA as our Information Governance Manager and play a pivotal role in shaping how we protect, manage and use data across our organisation. As the lead authority on data protection and information governance, you’ll ensure compliance with UK GDPR, guide colleagues at all levels, and embed a culture of responsible data use.
Working closely with senior technology leaders, you’ll oversee governance frameworks, manage information risks, and act as our key contact with the ICO, while supporting innovation in areas such as AI and digital delivery.
Why work for YHA?
Join our team and enjoy a range of exclusive staff benefits that support your well‑being and career growth:
* 10 nights free hostel stays per year for you and up to 3 friends or family
* Access to YHA’s staff discount and cash back portal
* Free YHA Membership each year
* Access to support via our Employee Assistance Program
There are many more benefits to working for YHA so please visit our YHA Jobs website for more information.
What will you be doing as Information Governance Manager?
* Act as YHA’s lead authority on information governance and data protection, ensuring compliance with UK GDPR, PECR, and related regulations
* Provide expert advice and practical guidance to senior leaders and colleagues on data protection and privacy matters
* Lead and deliver the organisation’s data protection compliance programme, including maintaining records, registers, and audit trails
* Chair the Information Governance Group, driving organisation-wide engagement and accountability for data protection and information security
* Manage and respond to data subject rights requests, complaints, and external enquiries, ensuring timely and compliant outcomes
* Oversee relationships with regulators, acting as the primary contact with the Information Commissioner’s Office (ICO)
* Review and approve third‑party data processing arrangements, ensuring contracts and compliance requirements are met
* Develop, implement, and maintain data protection, IT, cyber security, and AI governance policies and procedures
* Lead incident response planning and management for data breaches and IT incidents, including reporting and post‑incident improvements
* Design and deliver training, awareness, and communications programmes to promote a strong culture of data protection and information governance across YHA
What Skills and Experience do you need?
* Strong knowledge of UK data protection legislation (including UK GDPR and PECR), with proven practical experience in an information governance or data protection role
* Experience of implementing and monitoring compliance frameworks across a complex or multi‑site organisation
* Demonstrable experience engaging with regulatory bodies, particularly the Information Commissioner’s Office (ICO)
* Proven ability to develop, maintain and embed data protection, IT, and information governance policies and procedures
* Experience managing data breaches or IT incidents, including developing and testing incident response plans
* Understanding of emerging technologies such as AI and their implications for data protection, privacy, and organisational risk
* Strong stakeholder management and influencing skills, with the ability to advise and challenge senior leaders
* Excellent communication skills, with the ability to translate complex regulatory or technical information into clear, accessible guidance
* Experience designing and delivering training and awareness programmes, including e‑learning content
* Demonstration of our HEART values – they’re part of everything we do, and we look for people who bring them to life in their everyday work
For more information about the role and the skills and experience required, please refer to the job description.
At YHA, we understand the richness of life experiences, and we place just as much importance on lived experiences as we do on skills and knowledge. We provide a robust induction, ongoing training, and opportunities for personal growth. While certain roles may require specific skills, we welcome applicants from all backgrounds. For more information about how we are creating an inclusive workplace please visit our jobs website.
PLEASE NOTE All relevant checks are in place to ensure safeguarding and legal requirements of safer recruitment are adhered to. We do reserve the right to close this advertisement early if we receive a high volume of suitable applications.
#J-18808-Ljbffr