Information Governance Officer

University Of Oxford; England; On-site; GBP 80,000 - 100,000; Full time

Job summary

A prestigious academic institution located in the United Kingdom is looking for an experienced Information Governance and Security professional. This 12-week position is critical for shaping and embedding information governance and security practices across a major research division. The successful candidate will have demonstrable experience with ISO 27000 or NHS Data Security Toolkit and must understand GDPR/DPA2018. Strong communication, analytical, and organisational skills are essential. Candidates should be able to start immediately and work on-site if required.

Qualifications

• Demonstrable and substantial experience in ISO 27000 and related.
• Strong understanding of GDPR/DPA2018 and its application in large organisations.

Responsibilities

• Develop and implement information governance and security policies.
• Advise managers on compliance with GDPR/DPA2018 and security frameworks.
• Oversee and curate the Information Asset Register.
• Support internal and external audits and track compliance actions.
• Lead training and induction activities related to information responsibilities.

Skills

ISO 27000

NHS Data Security Toolkit

Cyber Essentials

GDPR/DPA2018

Communication skills

Analytical skills

Organisational skills

Education

Degree level education or equivalent

Job description

About the role

Supporting a complex and high-profile academic environment, this 12-week role offers the chance to shape and embed robust information governance and security practices across a major research division. You will be educated to degree level or equivalent, with demonstrable experience in ISO 27000, NHS Data Security Toolkit, Cyber Essentials or clinical trials governance, a strong understanding of GDPR/DPA2018, and excellent communication, analytical and organisational skills.

We are seeking an experienced Information Governance and Security professional to support a complex and high-profile academic environment within a major research division. This is an exciting opportunity to play a key role in shaping, embedding and assuring robust information governance and information security practices across a diverse portfolio of research and administrative activity.

Key responsibilities

Working closely with senior academic leadership, divisional teams and central University services, you will contribute to the development and implementation of information governance and security policies and strategies. You will advise and support managers and Principal Investigators in meeting regulatory and institutional requirements, ensuring compliance with GDPR/DPA2018 and relevant security frameworks.

Key responsibilities include overseeing and curating the Information Asset Register, supporting internal and external audits, tracking and reporting compliance actions, and investigating and managing governance incidents in line with University protocols. You will also lead on training and induction activities, ensuring staff understand their information responsibilities, and support Privacy and Security by Design through the review of new projects, data flows and risk assessments.

Essential Criteria

• Demonstrable and substantial experience with at least one of ISO 27000 (and related), the NHS Data Security Toolkit, Cyber Essentials and/or managing the information governance aspects of clinical trials.
• Understanding of the GDPR/DPA2018 and its application in a large organisation.

Please be aware that all candidates need to be able to start work immediately and must be able to work on site if required to do so.