Senior Information Governance Officer

Our information governance professionals play an important role in supporting the strategic direction of a global university, helping ensure that information is managed responsibly and effectively. The work is intellectually challenging, varied and rewarding.

This is an exciting opportunity to join a team of dedicated data protection, information and records management, and freedom of information colleagues within our Legal & Governance directorate. As a Senior Information Governance Officer, you will play an important role in developing and delivering the University's information governance and data protection compliance programme, with opportunities to contribute to improvements in information management practices and the University's Microsoft 365 information governance maturity.

You will work with colleagues across the University to ensure that information is appropriately managed throughout its lifecycle, from creation and storage through to retention and disposal. You will help embed good data protection and information governance practices, strengthen accountability and ownership, and support the University to make better use of its information in a compliant, governed and increasingly AI-enabled environment. The team works three days in the office with a mid-week anchor day.

Your responsibilities will include:

• Providing a responsive information governance business partner, advice and consultancy support service to dedicated areas of the University; supporting key stakeholders to manage information effectively and meet their information governance obligations.
• Conducting data protection impact assessments and other information governance assessments, identifying risks and recommending proportionate controls.
• Monitoring compliance against the University's data protection and information governance framework, and identifying opportunities for improvement.
• Contributing to the development, implementation and review of information governance policies, standards and procedures.
• Supporting initiatives to improve the lifecycle management of University information assets, including reviews of: retention and disposal, data quality and information management standards.
• Supporting the development of Microsoft 365 information governance maturity, including improvements to information ownership, classification, access controls, retention and lifecycle management across the environment.
• Working with Information Asset Owners, Information Asset Managers, site owners and other stakeholders to strengthen information ownership, accountability and management practices.
• Establishing and reviewing information-sharing agreements and data processing agreements.
• Drafting and reviewing privacy notices and other information governance documentation.
• Developing and delivering information governance guidance, training and awareness activities to promote good practice across the University.
• Maintaining and developing the University's Information Asset Register and Record of Processing Activities, supporting improved visibility and accountability for the University's information assets and processing activities.
• Supporting the management and resolution of information governance complaints, incidents and other compliance matters.
• Contributing to information governance strategic projects.

The role will support the University in achieving its strategic priorities by ensuring that information is managed in a way which is appropriately compliant, secure, accessible and retained for no longer than necessary. You will contribute to the continued development of a mature information governance environment, enabling effective collaboration, responsible use of information and readiness for emerging technologies, including artificial intelligence.

You will possess exceptional written and verbal communication skills, with the ability to explain complex legal, technical and information management matters clearly and concisely to colleagues at all levels. You will be able to build effective working relationships, exercise sound judgement and balance competing priorities, taking a practical and proportionate approach to managing information governance risks.