Information Governance Manager

Buckinghamshire New University is seeking an experienced Information Governance Manager to lead its information governance function, ensuring that information is managed lawfully, securely, consistently and effectively throughout its lifecycle.

The role provides expert advice and assurance across data protection, information rights, records management and information risk; oversees complex and high-risk matters; and develops governance frameworks, policies and standards that support regulatory compliance, organisational accountability and the effective use of information.

Main Duties & Responsibilities:

- Lead the University's information governance function, balancing strategic priorities with effective operational delivery.
- Line manage and develop the Information Compliance Officer, allocating work and resources to meet statutory deadlines and service standards.
- Act as the senior escalation point for complex, sensitive or high-risk compliance matters.
- Oversee responses to Freedom of Information, Environmental Information Regulations, Subject Access and other information rights requests, reviewing and authorising complex or high-profile disclosures.
- Provide expert advice on information rights legislation and manage related complaints, internal reviews and regulatory investigations.
- Lead engagement with the Information Commissioner's Office and monitor legislative and regulatory developments affecting the University.
- Develop, implement and review information governance, privacy and records management policies, procedures, standards and retention arrangements.
- Maintain the University's compliance framework, Information Asset Registers and related governance documentation in line with legal, regulatory and sector requirements.
- Oversee Data Protection Impact Assessments, Legitimate Interest Assessments, supplier assurance reviews and investigations into information governance risks.
- Identify compliance risks, lead improvement initiatives and promote effective information lifecycle management across the University.
- Report on compliance performance, risks and improvement activity to senior management, committees and governance groups, supported by meaningful metrics and management information.
- Develop and deliver training, awareness campaigns and practical guidance that promote statutory responsibilities and good practice.
- Provide specialist advice and support to managers and staff on information compliance matters.
- Maintain professional knowledge through continuing professional development and horizon scanning, and contribute to relevant governance groups, working groups and projects.
- Comply with relevant legislation and University requirements, and undertake other duties reasonably required of the role.

Person Specification – Essential Criteria:

Education, Qualifications & Training:
- Degree or equivalent professional experience in a relevant discipline.

Knowledge & Experience:
- Significant experience working in an information governance, data protection, information rights, records management or related regulatory environment.
- Detailed knowledge of UK GDPR, the Data Protection Act 2018, the Freedom of Information Act, the Environmental Information Regulations and associated regulatory guidance.
- Sound knowledge of records and information lifecycle management principles, including retention, disposal, classification and information asset management.
- Experience developing, implementing and maintaining organisation-wide information governance frameworks, policies, procedures and standards.
- Experience identifying, assessing and managing information governance risks, including the use of DPIAs, LIAs, assurance reviews or equivalent governance processes.
- Experience overseeing complex information rights requests, complaints, internal reviews, disclosures or regulatory matters.
- Experience interpreting legislation and regulatory requirements and providing authoritative, pragmatic advice to senior stakeholders.
- Experience producing management information, risk reporting and performance metrics for senior management or governance committees.
- Experience managing, supervising or developing staff and coordinating workloads to meet statutory and organisational deadlines.

Skills:
- Strong analytical and problem-solving skills.
- Ability to interpret complex legislation and apply it pragmatically.
- Excellent written communication skills, including report and policy drafting.
- Excellent stakeholder management, influencing and negotiation skills.
- Ability to present information clearly to senior leaders and committees.
- Ability to manage competing priorities and statutory deadlines.
- Ability to lead organisational change and compliance improvement initiatives.

Special Requirements:
- Travel to remote sites as required.

Key Behavioural Indicators:
- Developing self and others: Showing commitment to own ongoing professional development and supporting others to reach their full potential.
- Finding solutions: Taking a holistic view and working enthusiastically to analyse problems and develop workable solutions.
- Achieving results: Consistently meeting agreed objectives and taking personal responsibility for getting things done.

What we offer:
- 30 days holiday per annum, plus bank holidays and closure days.
- Hybrid working (dependent on business needs).
- Training and development support opportunities.
- Contributory pension scheme.
- Free gym membership for our on-site gym.
- A range of staff discounts with major retailers.

Location: High Wycombe Campus (travel to Uxbridge and Aylesbury may be required).
Responsible to: Head of Information and Data Governance.
Responsible for: Information Compliance Officer.