Information Governance Manager / Deputy Data Protection Officer

Job summary

From healthcare to artificial intelligence, energy to national security, we provide legal advice to government departments on nation-changing subjects.

At Government Legal Department we have a vital, single-minded purpose: to help the Government govern well within the rule of law. This is complemented by our exciting vision to be an outstanding legal organisation, committed to the highest standards of service and professionalism and a brilliant place to work where we can all thrive and fulfill our potential.

Our work touches almost every aspect of public life. We are the largest provider of legal services across government, working on high profile matters.

Our respected professionals are involved in everything from regulation and litigation to advice on drafting legislation. They provide expertise to the full range of government departments. We are at the heart of delivering the government’s priorities and our success depends on our people.

GLD is a non-ministerial government department headed by the Treasury Solicitor, our Permanent Secretary, and employs nearly 4000 people, including nearly 3000 legal professionals. We have offices nationwide, in Bristol, Leeds, inner and outer London and Manchester. Our lawyers can also be located within other departments and overseas.

GLD also depends on a range of cross-functional professionals to provide our corporate services. There are nearly 1000 colleagues playing an essential part in helping GLD to achieve its purpose and truly deliver much more than law.

This is an exciting time to join GLD, with cutting edge legal work on global issues and a transformation agenda which is ensuring the Department exemplifies the Modern Civil Service .

To find out more about what we do you can view our introductory film . On our website y ou can hear from team members, find out how to apply and learn about the benefits of working for GLD. You can also read more about the future vision for GLD in our GLD Strategy 2024 – 2027 .

Job description

About the Finance Operations and Digital Directorate

Finance Operations and Digital Directorate provide a range of services in support of GLD.

The teams within our Directorate are wide-ranging and include all aspects of Finance (planning, procurement, and financial management), ICT and Operations (Security, business resilience, health & safety, records management & facilities management, property and data protection). Whilst the work we do is varied, we share a common aim, to provide the support necessary to enable GLD to be the best in the business.

In the Finance Operations and Digital Directorate, we get things done and will always aim to provide a professional and efficient service.

From managing day to day services to delivering key projects, the Operations Division is a key component that enables GLD to fulfil its wider role in providing legal advice to Government. You will be joining a division rich in diversity and specialist skills, whose wide-ranging portfolio includes Property, Business Continuity & Resilience, Data, Information Protection to Security and Ways of Working.

Some of our key achievements in recent months have included the delivery of GLD’s long term accommodation strategy by expanding outside of London and moving into state-of the-art facilities across the regions, working to create and adopt the first ever Sustainability Strategy as part of the “Greening Government” commitments, to working alongside Cabinet Office in adapting security frameworks amidst emerging conflicts and threats.

The Information Rights Team manages Freedom of Information and Data Protection disclosures, responds to data breaches and advises on records management. It handles requests from organisations, professionals, staff and the public, providing a timely and efficient disclosure service while ensuring legal obligations are met and lessons are learned from incidents.

The team also delivers advice and training, conducts audits and privacy impact assessments, reviews data-sharing agreements, memorandums and contracts, and supports records management across the Department. Its work strengthens privacy through security, guidance and responsible behaviour, helping the Department balance data protection with transparency and accountability.

Our colleagues are the core of what we do and who we are. We offer several training packages and development plans in order to equip our staff with both specialist and transferable skills that will enrich their careers, whether within GLD or the wider Civil Service. We look forward to receiving your application and onboarding you soon.

Nick Price CBE, Director of Operations

The Role

The successful candidate will report to and deputise for the Head of Information Rights and Data Protection Officer for GLD.

Working closely with Legal teams as well as Security and Digital teams, they will provide specialist advice and counsel to the department on Information Governance matters. The postholder will act as an expert point of contact for interpreting practical application of legislation such as:

• UK GDPR, Data Protection Act 2018; and Data (Use and Access) Act 2025
• Freedom of Information Act 2000 and Environmental Information Regulations 2004
• Privacy and Electronic Communications Regulations 2003
• Public Records Act 1968

This role is suitable for experienced and qualified professionals operating in a complex legal environment .

The postholder will be responsible for:

• Line managing the Information Rights Team and supporting their delivery of statutory services to the highest standard
• Managing complex disclosures liaising with colleagues across government to ensure consistency and compliance
• Monitor compliance with legislation against industry standards in a continually changing legal landscape ensuring continual improvement
• Provide advice and guidance to the department on compliance with Freedom of Information Requests, Subject Access Requests
• Review and implement the department’s personal data breach procedure and manage GLD’s response to data breaches
• Review the Information Governance Framework keeping it abreast of the most recent changes in legislation and advances in the use of personal data
• Support the development and interpretation of data sharing agreements, memorandums of understanding and contracts
• Conduct Data Protection Impact Assessments in line with statutory requirements and make recommendations to mitigate risks
• Act as a champion promoting information governance and best practices, raise awareness through training and other support services
• Where appropriate deputise for the Data Protection Officer and ensure compliance with the statutory role under DPA18 Section 71, GDPR Article 39
• Any other duties and tasks as may be required, appropriate to the level of the post

Person specification

Behaviours

Below are details of the Success Profiles that make up this role. Demonstrating all the behaviours listed below is essential at either application or interview. You can read more about Success Profiles and how they are used as an assessment method before completing your application .

We'll assess you against these behaviours during the selection process:

• Communicating and influencing (Lead behaviour)
• Making effective decisions
• Delivering at pace

Lead behaviour will be used when there is a need to distinguish between candidates who are closely tied or the same after the initial consideration of essential criteria at sift/interview.

K ey Skills & Experience

Essential – must be demonstrated at application and interview

• Managing statutory requests for information (FOI requests and SARs)
• Managing data breach incidents involving personal data
• Reviewing contracts, drafting data sharing agreements and MoUs
• Experience of Information Governance in a legal or regulatory setting
• Effectively leading a team
• Communicating complex matters to legal and technical audiences

Desirable

Desirable criteria will be used when there is a need to distinguish between candidates who are closely tied or the same after the initial consideration of essential criteria, at sift and / or interview.

• Experience of using Microsoft suite and case management systems

Technical Professional Skills

Essential – must be demonstrated interview

• Expertise in the Data Protection Act 2018
• Expertise in the UK General Data Protection Regulations 2018
• Expertise with Privacy & Electronic Communications Regulations 2003
• Expertise in FOI Act 2000 and EIR 2004
• Expertise with the Public Records Act 1967

Qualifications – Minimum Eligibility Criteria

• Recognised Knowledge and Information Management (KIM) qualification or significant experience in a similar role (For more information see Government Knowledge & Information Management Profession - GOV.UK )

Security Clearance Level

All GLD employees must hold BPSS. If successful for this post you must hold or be willing to obtain SC level clearance for this role. You can start this position while obtaining this clearance level, however continued appointment will be conditional upon obtaining the required security clearance. More information can be found about the vetting and clearance levels before completing your application.

Sponsorship and Visas

There is the possibility that GLD can provide sponsorship for skilled workers, as long as they meet the full eligibility criteria set down under current immigration legislation. GLD does not guarantee sponsorship will be provided or that an applicant will be successful in gaining a skilled worker visa.

Candidates with Limited Leave to Remain can apply but must have at least 12 months remaining on an existing visa which allows them to work for GLD when employment commences. Please allow three months for the onboarding process from the point of offer.

It is the responsibility of the applicant to ensure that they meet the criteria for sponsorship. They also have the responsibility to notify the Resourcing Team that they require Sponsorship at the start of the onboarding process into GLD. This applies to existing civil servants as well as external candidates.

Qualifications

Recognised Knowledge and Information Management (KIM) qualification or significant experience in a similar role (For more information see Government Knowledge & Information Management Profession - GOV.UK)

Behaviours

We'll assess you against these behaviours during the selection process:

• Communicating and Influencing
• Making Effective Decisions
• Delivering at Pace

Technical skills

We'll assess you against these technical skills during the selection process:

• Technical Professional Skills

Benefits

Alongside your salary of £57,263, Government Legal Department contributes

£16,589 towards you being a member of the Civil Service Defined Benefit Pension scheme.

Find out what benefits a Civil Service Pension provides (opens in a new window).

• Learning and development tailored to your role
• An environment with flexible working options
• A culture encouraging inclusion and diversity
• A Civil Service pension with an employer contribution of 28.97%

Benefits of working for the Civil Service

Whatever your role, we take your career and development seriously, and want to enable you to build a really successful career with the Department and wider Civil Service. It is crucial that our employees have the right skills to develop their careers and meet the challenges ahead, and you’ll benefit from regular performance and development reviews to ensure this development is ongoing. As a Civil Service employee, you’ll be entitled to a large range of benefits.

Learning and Development at GLD

GLD has a comprehensive learning and development offer for all employees.

We offer a programme of in-person/hybrid and virtual sessions providing learning on profession-specific, soft