Data Governance Lead

Job summary

Discover what it’s like to work in a compliance role that makes an impact. Could you help us shape a stronger, fairer future? Your next career move starts here.

Data and Risking Services provides digital solutions to help HMRC manage risk, intelligence and compliance effectively. The team ensures that critical processes are supported by secure systems, smart tools, and innovative solutions that maximise resources and strengthen HMRC's ability to tackle risk and reduce the tax gap.

The Data Governance Lead will report to the Senior Data Governance Lead within the Data and Risking Services Corporate Centre. The team are responsible for ensuring appropriate data governance models are in place for ingesting and sharing of data both internally and externally. The team manage the data governance of cross government data exchanges, ensuring data sharing is legal, proportionate and in line with Data Protection regulations.

You will lead the end-to-end data lifecycle, supporting the movement of bulk data by preparing relevant data transfer documentation, such as Process Memorandum of Understanding (pMoU), Data Protection Impact Assessments (DPIA) and Certificate of Review and Assurance CoRA, and engaging with all relevant stakeholders (internal and external).

Job description

Your duties will include:

• Drafting and development of data exchange documentation - Memorandum of Understanding, Data Protection Impact Assessment and Certificate of Review & Assurance. This will include engagement with cross-government stakeholders, Security & Information Business Partners, Data Analysts and HMRC Central Policy when required, to prepare documentation, checking for accuracy prior to data transfer.
• Ensuring all data exchanges and retention are UK General Data Protection Regulation (UK GDPR) compliant.
• Collaborating with internal and external stakeholders to resolve data exchange issues and security incidents.
• Ensuring compliance with Data Security and External Data Exchange Team (EDE) policies by working with Security & Information Business Partners and external stakeholders to complete assurance checks on data exchanges and data handling, capturing, and escalating any issues as required.
• Proactively sharing knowledge and best practice with data governance colleagues and updating relevant documentation and Team guidance.
• Maintaining management information on data exchanges, including benefit realisation data and responding to demand-led MIS requests as required.
• Responding to any ad-hoc requests received for Data Acquisition, working closely with relevant colleagues within that area.

Person specification

We are looking for someone who has an understanding of data governance models and UK GDPR, and is passionate about data security.

You will have the personal drive, initiative and ability to work with minimal supervision and at pace, often engaging in high profile cross government exchanges.

You will be confident building and maintaining relationships with stakeholders across HMRC and other government departments to develop and deliver important data exchange documents and will be able to work flexibly to tight deadlines.

Essential Criteria

To be considered for this role, your application must demonstrate all of the following:

• Experience of drafting and development of data exchange documentation including Process Memorandum of Understanding (PMOU), Data Protection Impact Assessments (DPIA), Record of Processing Activity (ROPA) and Certificate of Review and Assurance (CoRA).
• Demonstrable understanding of GDPR principles relating to data security.
• Experience of conducting assurance or compliance activity.

Further Location Information

Please ensure that you only apply for a location that you are willing and able to work from, as we will only make one offer of employment. Any additional notes included in a ‘Further Location Preferences (optional)’ field within the application form, will not be considered. Please be aware that you cannot change your location preference after submitting your application.

Office Closures

If your location preference is for the following site, it’s important to note that this is not a long-term site for HMRC and we will require you to move to a new building in the future, subject to our location strategy and the applicable employee policies at that time.

For more information on where you might be working, review this information on our locations (opens in a new window)

The site is:

• Benton Park View, Newcastle - moving to Pilgrims Quarter, Newcastle
  

You will be given more information about what this means at the job offer stage.

Behaviours

We'll assess you against these behaviours during the selection process:

• Delivering at Pace
• Working Together
• Communicating and Influencing

Benefits

Alongside your salary of £37,682, HM Revenue and Customs contributes £10,916 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

HMRC operates both Flexible and Hybrid Working policies, allowing you to balance your work and personal commitments. We welcome applications from those who need to work a more flexible arrangement and will agree to requests where possible, considering our operational and customer service needs.

We offer a generous leave allowance, starting at 25 days and increasing by a day for every year of qualifying service up to a maximum of 30 days.

• Pension - We make contributions to our colleagues’ Alpha pension equal to at least 28.97% of their salary.
• Family friendly policies.
• Personal support.
• Coaching and development.

To find out more about HMRC benefits and find out what it’s really like to work for HMRChear from our insiders or visitThinking of joining the Civil Service

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candid