The Information Governance Officer will be responsible for ensuring the company complies with data protection, information security, and information access legislation. The role involves managing Freedom of Information (FOI), Subject Access Requests (SARs), GDPR-related enquiries, and data breach investigations, while providing expert advice and guidance to staff, managers, and external stakeholders. The successful candidate will help protect sensitive information, maintain governance records, support compliance
Key Responsibilities
1. Manage and coordinate Freedom of Information (FOI), Subject Access Requests (SARs), Environmental Information Regulations (EIR), and other GDPR-related requests within statutory deadlines.
2. Act as the first point of contact for Information Governance enquiries from staff, managers, elected members, and members of the public.
3. Provide advice and guidance on Data Protection Act 2018, GDPR, FOI legislation, EIR, and Information Governance policies.
4. Review and process requests for exemptions and extensions, ensuring compliance with legal and organisational procedures.
5. Record, investigate, and risk assess data breaches and information security incidents, escalating high-risk cases when necessary.
6. Support managers with incident investigations and prepare reports with recommendations to improve compliance and reduce risk.
7. Maintain and update Information Governance databases, registers, and records management systems.
8. Assist with Data Protection Impact Assessments (DPIAs), Data Sharing Agreements, and information asset management activities.
9. Liaise with external bodies including the Information Commissioner's Office (ICO), Police, Solicitors, and Insurance Companies on governance-related matters.
10. Deliver Information Governance training, awareness sessions, and guidance to staff while supporting policy reviews and continuous improvement initiatives.
Essential Skills & Knowledge
11. Strong knowledge of GDPR, Data Protection Act 2018, Freedom of Information Act, and Environmental Information Regulations.
12. Ability to interpret and apply complex legislation, policies, and governance procedures accurately.
13. Experience handling confidential, sensitive, and personal information with a high level of discretion.
14. Strong analytical skills with the ability to assess risks, investigate issues, and recommend practical solutions.
15. Excellent written communication skills, including preparing reports, guidance documents, correspondence, and responses to information requests.
16. Strong verbal communication and presentation skills, with the ability to explain complex information to different audiences.
17. Ability to manage multiple priorities and work effectively under strict statutory deadlines.
18. High level of accuracy, attention to detail, and record-keeping capability.
19. Proficiency in Microsoft Office applications, databases, and information management systems.
20. Strong organisational and stakeholder management skills, with the ability to work collaboratively across departments and with external organisations.