Information Governance Manager / Deputy Data Protection Officer

Job summary

From healthcare to artificial intelligence, energy to national security, we provide legal advice to government departments on nation-changing subjects.

At Government Legal Department we have a vital, single-minded purpose: to help the Government govern well within the rule of law. This is complemented by our exciting vision to be an outstanding legal organisation, committed to the highest standards of service and professionalism and a brilliant place to work where we can all thrive and fulfill our potential.

Our work touches almost every aspect of public life. We are the largest provider of legal services across government, working on high profile matters.

Our respected professionals are involved in everything from regulation and litigation to advice on drafting legislation. They provide expertise to the full range of government departments. We are at the heart of delivering the government’s priorities and our success depends on our people.

GLD is a non-ministerial government department headed by the Treasury Solicitor, our Permanent Secretary, and employs nearly 4000 people, including nearly 3000 legal professionals. We have offices nationwide, in Bristol, Leeds, inner and outer London and Manchester. Our lawyers can also be located within other departments and overseas.

GLD also depends on a range of cross-functional professionals to provide our corporate services. There are nearly 1000 colleagues playing an essential part in helping GLD to achieve its purpose and truly deliver much more than law.

This is an exciting time to join GLD, with cutting edge legal work on global issues and a transformation agenda which is ensuring the Department exemplifies the Modern Civil Service.

To find out more about what we do you can view our introductory film. On our website you can hear from team members, find out how to apply and learn about the benefits of working for GLD. You can also read more about the future vision for GLD in our GLD Strategy 2024 – 2027.

Job description

About the Finance Operations and Digital Directorate

Finance Operations and Digital Directorate provide a range of services in support of GLD.

The teams within our Directorate are wide-ranging and include all aspects of Finance (planning, procurement, and financial management), ICT and Operations (Security, business resilience, health & safety, records management & facilities management, property and data protection). Whilst the work we do is varied, we share a common aim, to provide the support necessary to enable GLD to be the best in the business.

In the Finance Operations and Digital Directorate, we get things done and will always aim to provide a professional and efficient service.

From managing day to day services to delivering key projects, the Operations Division is a key component that enables GLD to fulfil its wider role in providing legal advice to Government. You will be joining a division rich in diversity and specialist skills, whose wide-ranging portfolio includes Property, Business Continuity & Resilience, Data, Information Protection to Security and Ways of Working.

Some of our key achievements in recent months have included the delivery of GLD’s long term accommodation strategy by expanding outside of London and moving into state-of the-art facilities across the regions, working to create and adopt the first ever Sustainability Strategy as part of the “Greening Government” commitments, to working alongside Cabinet Office in adapting security frameworks amidst emerging conflicts and threats.

The Information Rights Team manages Freedom of Information and Data Protection disclosures, responds to data breaches and advises on records management. It handles requests from organisations, professionals, staff and the public, providing a timely and efficient disclosure service while ensuring legal obligations are met and lessons are learned from incidents.

The team also delivers advice and training, conducts audits and privacy impact assessments, reviews data-sharing agreements, memorandums and contracts, and supports records management across the Department. Its work strengthens privacy through security, guidance and responsible behaviour, helping the Department balance data protection with transparency and accountability.

Our colleagues are the core of what we do and who we are. We offer several training packages and development plans in order to equip our staff with both specialist and transferable skills that will enrich their careers, whether within GLD or the wider Civil Service. We look forward to receiving your application and onboarding you soon.

Nick Price CBE, Director of Operations

The Role

The successful candidate will report to and deputise for the Head of Information Rights and Data Protection Officer for GLD.

Working closely with Legal teams as well as Security and Digital teams, they will provide specialist advice and counsel to the department on Information Governance matters. The postholder will act as an expert point of contact for interpreting practical application of legislation such as:

• UK GDPR, Data Protection Act 2018; and Data (Use and Access) Act 2025
• Freedom of Information Act 2000 and Environmental Information Regulations 2004
• Privacy and Electronic Communications Regulations 2003
• Public Records Act 1968

This role is suitable for experienced and qualified professionals operating in a complex legal environment.

The postholder will be responsible for:

• Line managing the Information Rights Team and supporting their delivery of statutory services to the highest standard
• Managing complex disclosures liaising with colleagues across government to ensure consistency and compliance
• Monitor compliance with legislation against industry standards in a continually changing legal landscape ensuring continual improvement
• Provide advice and guidance to the department on compliance with Freedom of Information Requests, Subject Access Requests
• Review and implement the department’s personal data breach procedure and manage GLD’s response to data breaches
• Review the Information Governance Framework keeping it abreast of the most recent changes in legislation and advances in the use of personal data
• Support the development and interpretation of data sharing agreements, memorandums of understanding and contracts
• Conduct Data Protection Impact Assessments in line with statutory requirements and make recommendations to mitigate risks
• Act as a champion promoting information governance and best practices, raise awareness through training and other support services
• Where appropriate deputise for the Data Protection Officer and ensure compliance with the statutory role under DPA18 Section 71, GDPR Article 39
• Any other duties and tasks as may be required, appropriate to the level of the post

Person specification

Behaviours

Below are details of the Success Profiles that make up this role. Demonstrating all the behaviours listed below is essential at either application or interview. You can read more about Success Profiles a