Information Governance Officer – GDPR - initially 6 months FTC
Make a meaningful impact by shaping how we protect, manage and use information across our organisation.
About the Role
My client is looking for an Information Governance Officer, you’ll be the go-to expert on all matters of data protection, information governance and regulatory compliance. You’ll play a vital part in ensuring =my client meets their legal responsibilities—protecting the rights, privacy, and trust of the people whose data they hold.
This is a role where your expertise truly matters. You’ll help shape policies and best practice, guide colleagues across the business, strengthen governance framework, and ensure they maintain robust compliance with data protection legislation and Freedom of Information requirements.
While your core focus will be information governance, you may also have the opportunity to support wider organisational risk management activity—perfect for someone who enjoys working collaboratively across teams and expanding their professional scope.
What You’ll Be Doing
*Be the expert advisor on UK GDPR, DPA 2018, PECR, sector-specific regulations and—where applicable—Freedom of Information legislation.

You’ll guide colleagues on lawful bases for processing, consent, retention, transparency, and all aspects of data protection compliance.
*Champion DPIAs by advising when assessments are needed, reviewing them for adequacy, and supporting monitoring of risk mitigation actions.
*Support safe and compliant data sharing, reviewing and advising on data sharing agreements to ensure they are robust and properly adhered to.
*Lead on information management and retention, offering expert advice to ensure our documentation practices are compliant, consistent, and efficient.
*Develop and maintain key policies relating to information management, governance and probity—ensuring they remain clear, up to date, and user-friendly.
*Oversee data breach management, from incident assessment through to monitoring reporting processes, determining whether ICO notification is required, and supporting post-incident reviews.
*Manage our corporate record archive, ensuring it is maintained in line with Data Protection legislation and is aligned with organisational needs.
*Ensure timely and compliant responses to subject access requests and other statutory information requests.
*Provide assurance across multiple regulatory areas, including Anti-money Laundering, Anti-bribery, and Consumer Credit Licence requirements.
*(Occasional) Support organisational risk management, assisting with risk registers and contributing to risk-related reporting when required.
What We’re Looking For
Essential
*Strong, up-to-date knowledge of UK GDPR, DPA 2018, PECR and related data protection legislation.
*Experience developing policies and monitoring organisation-wide compliance.
*Excellent communication and organisational skills.
*Ability to break down complex regulatory requirements and give practical, clear advice.
*Experience managing data breaches, subject access requests and other statutory information processes.
Desirable
*Experience supporting organisational risk management frameworks.
*Understanding of risk management principles, risk registers and associated reporting.
Why Join Us?
This is an opportunity to take ownership of a high-impact, organisation-wide function where your work directly strengthens trust, transparency, and compliance.