Senior information governance officer

Band 5 · Information governance officer · 364 job evaluation points

Handles a caseload of information rights requests and incidents, and supports teams with data protection impact assessments and information sharing.

Responsibilities

Handle information rights requests, including redaction and applying exemptions, within legal time limits.
Assess and investigate data breaches and near misses, and track actions to close.
Help project teams complete data protection impact assessments and describe data flows.
Draft information sharing agreements and privacy notices for review.
Deliver information governance training and briefings to staff.
Carry out access and record-keeping audits.

Skills

Skill	Expected level	What this level means
Information governance and data protectionThis reference	Working (2)	You can: apply data protection principles to your work contribute to data protection impact assessments handle information requests and records correctly
Information rights requestsThis reference	Practitioner (3)	You can: handle complex or sensitive requests, including those involving third parties apply exemptions and decide what to withhold, with clear reasons manage internal reviews and complaints about responses
Information governance incident managementThis reference	Working (2)	You can: log incidents and gather the facts assess incidents against the organisation's severity criteria track actions to close
Data protection impact assessmentThis reference	Working (2)	You can: help project teams complete data protection impact assessments describe data flows and identify the lawful basis for processing record privacy risks and proposed controls
Confidentiality and information sharingThis reference	Working (2)	You can: check that a request to share information meets policy keep records of what was shared, with whom, and why draft simple information sharing agreements
Information governance assurance and auditThis reference	Working (2)	You can: collect and organise evidence for the annual self-assessment carry out simple audits, such as access or record-keeping audits track improvement actions
Data ethics and privacyUK GDaD PCF	Working (2)	You can: apply fundamental principles of data ethics and privacy in your work under supervision share data ethics and privacy risks through appropriate channels
Communicating informationUK GDaD PCF	Working (2)	You can: listen to the needs of design and business stakeholders and interpret information take part in discussions within a multidisciplinary team be an advocate for the team externally, and can manage differing perspectives shape and share communications relevant to the audience

Typical qualifications and experience

A recognised qualification in data protection or information governance, or equivalent experience.

Band 5 outline

Knowledge: Professional or technical knowledge, typically from a degree or equivalent experience.
Autonomy: Works to broad objectives within professional standards; plans own work.
Scope: Own professional work within a team or product.
Leadership: May guide and check the work of support staff and apprentices.
Accountability: Quality of own professional work.

Job evaluation (illustrative)

Factor	Level	Level summary	Points
Communication and relationship skills	4	Gives complex, sensitive, or contentious information needing persuasion, negotiation, or training skills, or highly complex information.	32
Knowledge, training, and experience	5	Expertise in a specialism, underpinned by theory or practical experience (degree level or equivalent).	120
Analytical and judgemental skills	3	Judgements on a range of facts or situations needing analysis or comparison of options.	27
Planning and organisational skills	2	Plans straightforward tasks or activities, some ongoing.	15
Physical skills	3	Developed skills needing speed or accuracy, such as advanced keyboard use.	27
Responsibility for patient and client care	1	Helps patients, clients, or relatives during incidental contact.	4
Responsibility for policy and service development	3	Implements policies for own area and proposes changes that affect other areas.	21
Responsibility for financial and physical resources	2	Handles cash or valuables, looks after equipment used by others, controls stock, or authorises small payments.	12
Responsibility for people	2	Supervises or coordinates staff day to day, trains others regularly, or gives basic HR advice.	12
Responsibility for information resources	4	Adapts or designs information systems to others' specifications, or runs information systems for a department as the main duty.	24
Responsibility for research and development	2	Regularly does research, development, trials, or equipment and system testing as part of the job.	12
Freedom to act	3	Follows defined policies and procedures; work is managed rather than supervised.	21
Physical effort	2	Frequent sitting or standing in a restricted position, or occasional light to moderate effort.	7
Mental effort	3	Frequent concentration on unpredictable work, or occasional prolonged concentration.	12
Emotional effort	2	Occasional exposure, or frequent indirect exposure, to distressing circumstances.	11
Working conditions	2	Occasional unpleasant conditions, frequent travel or outdoor work, or near-continuous screen use on most days.	7
Total (Band 5: 326 to 395)			364