Information Governance Manager / Deputy Data Protection Officer

Job description

About the job

Job summary

From healthcare to artificial intelligence, energy to national security, we provide legal advice to government departments on nation-changing subjects.

At Government Legal Department we have a vital, single-minded purpose: to help the Government govern well within the rule of law. This is complemented by our exciting vision to be an outstanding legal organisation, committed to the highest standards of service and professionalism and a brilliant place to work where we can all thrive and fulfill our potential.

Our work touches almost every aspect of public life. We are the largest provider of legal services across government, working on high profile matters.

Our respected professionals are involved in everything from regulation and litigation to advice on drafting legislation. They provide expertise to the full range of government departments. We are at the heart of delivering the government's priorities and our success depends on our people.

GLD is a non-ministerial government department headed by the Treasury Solicitor, our Permanent Secretary, and employs nearly 4000 people, including nearly 3000 legal professionals. We have offices nationwide, in Bristol, Leeds, inner and outer London and Manchester. Our lawyers can also be located within other departments and overseas.

GLD also depends on a range of cross-functional professionals to provide our corporate services. There are nearly 1000 colleagues playing an essential part in helping GLD to achieve its purpose and truly deliver much more than law.

This is an exciting time to join GLD, with cutting edge legal work on global issues and a transformation agenda which is ensuring the Department exemplifies the Modern Civil Service.

To find out more about what we do you can view our introductory film. On our website you can hear from team members, find out how to apply and learn about the benefits of working for GLD. You can also read more about the future vision for GLD in our GLD Strategy 2024 - 2027.

Job description

About the Finance Operations and Digital Directorate

Finance Operations and Digital Directorate provide a range of services in support of GLD.

The teams within our Directorate are wide-ranging and include all aspects of Finance (planning, procurement, and financial management), ICT and Operations (Security, business resilience, health & safety, records management & facilities management, property and data protection). Whilst the work we do is varied, we share a common aim, to provide the support necessary to enable GLD to be the best in the business.

In the Finance Operations and Digital Directorate, we get things done and will always aim to provide a professional and efficient service.

From managing day to day services to delivering key projects, the Operations Division is a key component that enables GLD to fulfil its wider role in providing legal advice to Government. You will be joining a division rich in diversity and specialist skills, whose wide-ranging portfolio includes Property, Business Continuity & Resilience, Data, Information Protection to Security and Ways of Working.

Some of our key achievements in recent months have included the delivery of GLD's long term accommodation strategy by expanding outside of London and moving into state-of the-art facilities across the regions, working to create and adopt the first ever Sustainability Strategy as part of the "Greening Government" commitments, to working alongside Cabinet Office in adapting security frameworks amidst emerging conflicts and threats.

The Information Rights Team manages Freedom of Information and Data Protection disclosures, responds to data breaches and advises on records management. It handles requests from organisations, professionals, staff and the public, providing a timely and efficient disclosure service while ensuring legal obligations are met and lessons are learned from incidents.

The team also delivers advice and training, conducts audits and privacy impact assessments, reviews data-sharing agreements, memorandums and contracts, and supports records management across the Department. Its work strengthens privacy through security, guidance and responsible behaviour, helping the Department balance data protection with transparency and accountability.

Our colleagues are the core of what we do and who we are. We offer several training packages and development plans in order to equip our staff with both specialist and transferable skills that will enrich their careers, whether within GLD or the wider Civil Service. We look forward to receiving your application and onboarding you soon.

Nick Price CBE, Director of Operations

The Role

The successful candidate will report to and deputise for the Head of Information Rights and Data Protection Officer for GLD.

Working closely with Legal teams as well as Security and Digital teams, they will provide specialist advice and counsel to the department on Information Governance matters. The postholder will act as an expert point of contact for interpreting practical application of legislation such as:

• UK GDPR, Data Protection Act 2018; and Data (Use and Access) Act 2025
• Freedom of Information Act 2000 and Environmental Information Regulations 2004
• Privacy and Electronic Communications Regulations 2003
• Public Records Act 1968

This role is suitable for experienced and qualified professionals operating in a complex legal environment.

The postholder will be responsible for:

• Line managing the Information Rights Team and supporting their delivery of statutory services to the highest standard
• Managing complex disclosures liaising with colleagues across government to ensure consistency and compliance
• Monitor compliance with legislation against industry standards in a continually changing legal landscape ensuring continual improvement
• Provide advice and guidance to the department on compliance with Freedom of Information Requests, Subject Access Requests
• Review and implement the department's personal data breach procedure and manage GLD's response to data breaches
• Review the Information Governance Framework keeping it abreast of the most recent changes in legislation and advances in the use of personal data
• Support the development and interpretation of data sharing agreements, memorandums of understanding and contracts
• Conduct Data Protection Impact Assessments in line with statutory requirements and make recommendations to mitigate risks
• Act as a champion promoting information governance and best practices, raise awareness through training and other support services
• Where appropriate deputise for the Data Protection Officer and ensure compliance with the statutory role under DPA18 Section 71, GDPR Article 39
• Any other duties and tasks as may be required, appropriate to the level of the post

Person specification

Behaviours

Below are details of the Success Profiles that make up this role. Demonstrating all the behaviours listed below is essential at either application or interview. You can read more about Success Profiles and how they are used as an assessment method before completing your application.

We'll assess you against these behaviours during the selection process:

• Communicating and influencing (Lead behaviour)
• Making effective decisions
• Delivering at pace

Lead behaviour will be used when there is a need to distinguish between candidates who are closely tied or the same after the initial consideration of essential criteria at sift/interview.

Key Skills & Experience

Essential - must be demonstrated at application and interview

• Managing statutory requests for information (FOI requests and SARs)
• Managing data breach incidents involving personal data
• Reviewing contracts, drafting data sharing agreements and MoUs
• Experience of Information Governance in a legal or regulatory setting
• Effectively leading a team
• Communicating complex matters to legal and technical audiences

Desirable

Desirable criteria will be used when there is a need to distinguish between candidates who are closely tied or the same after the initial consideration of essential criteria, at sift and / or interview.

• Experience of using Microsoft suite and case management systems

Technical Professional Skills

Essential - must be demonstrated interview

• Expertise in the Data Protection Act 2018
• Expertise in the UK General Data Protection Regulations 2018
• Expertise with Privacy & Electronic Communications Regulations 2003
• Expertise in FOI Act 2000 and EIR 2004
• Expertise with the Public Records Act 1967

Qualifications - Minimum Eligibility Criteria

• Recognised Knowledge and Information Management (KIM) qualification or significant experience in a similar role (For more information see Government Knowledge & Information Management Profession - GOV.UK)

Security Clearance LevelAll GLD employees must hold BPSS. If successful for this post you must hold or be willing to obtain SC level clearance for this role. You can start this position while obtaining this clearance level, however continued appointment will be conditional upon obtaining the required security clearance. More information can be found about the vetting and clearance levels before completing your application.

Sponsorship and Visas

There is the possibility that GLD can provide sponsorship for skilled workers, as long as they meet the full eligibility criteria set down under current immigration legislation. GLD does not guarantee sponsorship will be provided or that an applicant will be successful in gaining a skilled worker visa.

Candidates with Limited Leave to Remain can apply but must have at least 12 months remaining on an existing visa which allows them to work for GLD when employment commences. Please allow three months for the onboarding process from the point of offer.

It is the responsibility of the applicant to ensure that they meet the criteria for sponsorship. They also have the responsibility to notify the Resourcing Team that they require Sponsorship at the start of the onboarding process into GLD. This applies to existing civil servants as well as external candidates.

Qualifications

Recognised Knowledge and Information Management (KIM) qualification or significant experience in a similar role (For more information see Government Knowledge & Information Management Profession - GOV.UK)

Behaviours

We'll assess you against these behaviours during the selection process:

• Communicating and Influencing
• Making Effective Decisions
• Delivering at Pace

Technical skills

We'll assess you against these technical skills during the selection process:

• Technical Professional Skills

Benefits

Alongside your salary of £57,263, Government Legal Department contributes £16,589 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

• Learning and development tailored to your role
• An environment with flexible working options
• A culture encouraging inclusion and diversity
• A Civil Service pension with an employer contribution of 28.97%

Benefits of working for the Civil Service

Whatever your role, we take your career and development seriously, and want to enable you to build a really successful career with the Department and wider Civil Service. It is crucial that our employees have the right skills to develop their careers and meet the challenges ahead, and you'll benefit from regular performance and development reviews to ensure this development is ongoing. As a Civil Service employee, you'll be entitled to a large range of benefits.

Learning and Development at GLD

GLD has a comprehensive learning and development offer for all employees.

We offer a programme of in-person/hybrid and virtual sessions providing learning on profession-specific, soft skills, technical skills, and different topics. We also support colleagues through a range of different professional qualifications.

Cross-Functional Professional

We support all Professions with building their careers and capability aligning with the wider Civil Service offerings for each Profession.

There are also talent and development opportunities offered throughout the year these include:

Senior Leaders and Future Leaders Schemes - cross Civil Service accelerated development schemes.

Beyond Boundaries - cross government development programme designed to help participants develop the knowledge, skills and networks required to build a satisfying and effective career in the Civil Service.

Mentoring and Coaching - we encourage all colleagues to share their knowledge, capability, and experience.

Apprenticeships - We have a range of apprenticeships on offer across all professions with the opportunity for all employees to explore a profession specific apprenticeship to support their development in role.

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

Selection process details

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Strengths, Experience and Technical skills.

Application

To apply for this post you will need to complete the online application on Civil Service Jobs, searching the reference below. The deadline for this application is Monday 21st September 2026 at 12:00 Midday.

In your application you will be assessed on the following:

• A CV setting out your qualifications, career history, and educational achievements. Please ensure you have provided reasons for any gaps within the last two years. This will be scored and used to assess Key Skills and Experience and Qualifications as set out in the Person Specification.
• Behaviour statements (250 words maximum each) for: Communicating and influencing (Lead behaviour), Making effective decisionand Delivering at pace.

CV Guidance for candidates

Please note that CV forms part of the online application form.

Please find the following guidance on how to populate the three sections of the CV when completing the online application: You will be asked to provide your, employment history, previous skills and experience, and qualifications.

For Employment History - please add your employment history, you can set out the roles you have completed in the past with start to end dates.

For Previous Skills and Experience - please add your experience, skills, achievements, key responsibilities, and any transferable skills you can bring to this role.

For Qualifications - please list the details of your education and qualifications achieved.

Application Errors

Please take extra care to tick the correct boxes in the eligibility sections of your application form. We understand mistakes sometimes happen but if you contact us later than two working days (Monday-Friday) before the vacancy closes, we will not be able to reopen your application for you. If you do make a mistake with your eligibility form, please contact us via: [email protected] . Use the subject line to insert appropriate wording for example - 'Please re-open my application - 478871 closing date Monday 21st September 2026'.

Selection Process

After the closing date, the appointing panel shall assess candidates' suitability for the role based on evidence provided in their application against the behaviours and experience outlined in the person specification.

Staged Sift

We will conduct a staged sift. The initial sift will be on CV alone. Candidates assessed as demonstrating the required key skills & experience and qualifications in their CV will progress to the second stage of the two-stage sift where their behaviours will be assessed.

Candidates assessed as not demonstrating the required key skills & experience and qualifications in their CV will not progress to have their behaviours assessed; they will be deemed as unsuccessful in the first stage of the two-stage sift.

In the eventuality that there are a high number of applicants successful at sift, GLD may operate a longlist, whereby applicants who have been shortlisted and met the minimum pass mark but are not selected for interview will have their application placed on hold. After the initial interview round candidates on the longlist may be offered an interview, should there still be posts available.

Interview

If you are invited to interview, you will be assessed on your performance in the criteria listed in the Person Specification, and strength-based questions. These criteria are:

• Behaviour: Communicating and Influencing (Lead behaviour)
• Behaviour: Making Effective Decisions
• Behaviour: Delivering at Pace
• Key Skills & Experience
• Technical Professional Skills

Candidates will be expected to give a 5-mintute presentation which will be assessed on the criteria Key skills & experience. Details will be provided to shortlisted candidates in advance.

Your interview will take place online.

Offer

The timeline later in this pack indicates the date by which decisions are expected to be made, and all shortlisted candidates will be advised of the outcome as soon as possible thereafter.

All communications regarding your application will be made through Civil Service Jobs.

All candidates will be notified of the outcome as soon as possible after the interview. Feedback will only be provided if you attend an interview.

We appoint in strict order of merit. If you meet the minimum criteria for this position but are not successful for a post, you will be placed on the reserve list. We may contact you to see if you are interested in a post at the same, or a lower grade, in GLD should one arise.

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a basic (or equivalent) criminal record check.

People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.

Diversity and Inclusion

The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see theCivil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).

Apply and further information

This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.

Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Contact point for applicants

Job contact :

• Name : Karim Hussain
• Email : [email protected]

Recruitment team

• Email : [email protected]

Further information

You have the right to complain if you feel there has been a breach of the Recruitment Principles. If you feel that your application hasn't been treated in accordance with these Principles and wish to make a complaint, please contact [email protected] in the first instance. Please title your email as follows: 478871 - Information Governance Manager / Deputy Data Protection Officer - Recruitment Complaint. Complaints must be submitted in writing within 30 days of the incident or the decision which has caused the complaint. To fully engage with the issues raised GLD require that you submit evidence of your complaint.