Information Governance Manager and DPO

The Francis Crick Institute; London; On-site; GBP 68,000 - 78,000; Full time

Job summary

A leading biomedical research institute is seeking an Information Governance Manager and DPO to enhance its Data Privacy Framework. The role involves ensuring compliance with UK GDPR, developing privacy strategies, and building relationships across teams. The ideal candidate will have extensive experience in data privacy, strong interpersonal skills, and the ability to think strategically. This permanent, full-time position offers a competitive salary and benefits.

Benefits

Generous Leave

Pension Scheme

Health & Well-being Programs

Childcare Support Allowance

Discounted Gym Memberships

Qualifications

• 7+ years of experience in data privacy.
• Experience with UK GDPR and data protection compliance.

Responsibilities

• Develop and implement the Crick’s Privacy Strategy.
• Monitor compliance and data practices.
• Collaborate with IT for data security management.

Skills

Interpersonal Skills

Strategic Thinking

Data Privacy Expertise

Education

Data Protection Certification

Job description

Salary for this Role:

£68,819-£77,994 per annum with benefits, subject to skills and experience

Job Title:

Information Governance Manager and DPO

Reports to:

Paul McLaughlin

Closing Date:

05/Jun/2025 23.59 GMT

Job Description:

Information Governance Manager and Data Protection Officer

Details of the role: Permanent, full-time. Working pattern: Monday – Friday.

About us

The Francis Crick Institute is Europe’s largest biomedical research institute under one roof. Our world-class scientists and staff collaborate on vital research to help prevent, diagnose and treat illnesses such as cancer, heart disease, infectious diseases and neurodegenerative conditions.

The Crick is a place for collaboration, innovation and exploration across many disciplines. A space where the brightest minds can pursue big and bold ideas and discover answers to crucial scientific questions. We support them in a dynamic environment which fosters excellence with state-of-the-art infrastructure, cutting-edge facilities, and a creative and curious culture. We’ve removed traditional boundaries of departments, divisions and disciplines and instead have an open approach that supports every researcher. This gives us the freedom to collaborate and carry out high-quality, pioneering research. Creating a space for discovery without boundaries helps us to turn our science into benefits for human health and the economy.

About the role

The Crick is looking to recruit an Information Governance Manager and Data Protection Officer (DPO) to enhance its Data Privacy Framework and support its obligations under the UK GDPR. You will have the experience and desire to design, build and implement a new way of working to ensure both compliance and meet the needs of the Crick.

As the statutory DPO you will monitor compliance and data practices internally to ensure the institute, complies with the applicable requirements under the UK GDPR and other relevant legislation. Building strong relationships with colleagues across the Crick will be essential to enable you to develop manage and maintain a programme for compliance with regulation and help to embed a culture of learning and improved ways of working. The DPO will also serve as the primary contact for the Information Commissioner and individuals whose data is processed by the organisation.

You will work closely with the Crick’s Risk and Compliance and, Legal and Governance teams. The Risk and Compliance team is responsible for the Crick’s Risk Management Framework, Compliance Programme, Internal Audit and Insurance. The Legal & Governance team is a full-service function responsible for legal, contractual, regulatory and company secretarial matters.

What you will be doing

As a DPO at the Crick, you will:

Develop and implement the Crick’s Privacy Strategy including:

• Reviewing and updating the programme
• Developing and implementing policies and procedures
• Identifying risks

Ensuring Data Compliance:

• Keeping abreast of legal developments
• Working with key stakeholders to review operations, projects and related data processing

Data Breach Management:

• Collaborating with the Information Technology Office to maintain records of all data assets and exports and maintaining a personal data security incident management plan
• Responding to and advising on data subject rights requests

About you

You will bring

• Around 7+ years’ experience as a data privacy expert. You may be a qualified lawyer.
• Hold at least one data protection and/or privacy certification, such as CIPP, CIPT, CIPM, ISEB, etc. (preferred) or willingness to achieve within a short period of joining.
• A sound knowledge of legal and regulatory frameworks around data (e.g., DPA 2018, PECR (E-Privacy) and GDPR regulations), as well as related governance, best processes and practice.
• A sound understanding of the legal and regulatory context in which the Crick operates, gained through experience.
• Strong experience of supporting data protection compliance in practice.
• Ability to think strategically, plan and deliver projects. Ability to assess complex scenarios so as to give high-quality advice and identify pragmatic solutions.
• Good interpersonal skills (e.g., tact, integrity, confidentiality, patience). Ability to build personal credibility quickly and develop and maintain effective relationships, including working with people with differing perspectives and needs.

See the complete job description.

About Working at the Crick…

Our values

Everyone who works at the Crick has a valuable role to play in advancing the Crick’s mission and shaping our culture!

• We arebold. We make space for creative, dynamic and imaginative ideas and approaches. We’re not afraid to do things differently.

• We areopen. We’re highly collaborative and interactive, and make sure our activities are visible to the outside world.

• We arecollegial. We show respect for one another, work cooperatively and support the wider community.

At the Francis Crick Institute, we believe that diversity and inclusion are essential to driving innovation and scientific discovery. We are committed to creating a workplace where everyone feels valued, respected, and empowered to succeed, regardless of their background, identity, or personal circumstances. We actively encourage applications from individuals of all genders, ethnicities, abilities, and experiences. We are a Disability Confident: Committed employer and you will be asked as part of the process if you wish to apply under the scheme. We will make reasonable adjustments if you need them. If you need assistance with applying (i.e., would like to apply by phone or post)please email: [e-mail]

To find out more about life at the Crick click here.

What will you receive?

At the Francis Crick Institute, we value our team members and are proud to offer an extensive range of benefits to support their well-being and development:

Visas: Applicants for this role will be eligible for sponsorship to work in the UK

Generous Leave: 28 days of annual leave, plus three additional days over Christmas and bank holidays.

Pension Scheme: Defined contribution pension with employer contributions of up to 16%.

Health & Well-being:

• 24/7 GP consultation services.

• Occupational health services and mental health support programs.

• Eye care vouchers and discounted healthcare plans.

Work-Life Balance:

• Back-up care for dependents.

• Childcare support allowance.

• Annual leave purchase options.

• Crick Networks offering diverse groups’ support, community and inclusive social events.

Perks:

• Discounted gym memberships, bike-to-work scheme, and shopping discounts.

• Subsidised on-site restaurant and social spaces for team interaction.

Development & Recognition: Comprehensive training, mentoring, and a pay structure based on skills and experience.