Head of Information Governance and Assurance (DPO)

Head of Information Governance and Assurance (DPO)
Grade 11 – £64,317–£71,319 per annum

We are seeking a visionary and authoritative leader to take on the role of Head of Information Governance and Assurance—serving as the Council’s statutory Data Protection Officer (DPO). This is a critical post that shapes how Havering manages, protects, and governs its information assets in a complex and evolving digital landscape.

About the Role
This role provides strategic leadership and oversight of the Council’s information governance, assurance, and security functions. You will be responsible for setting and enforcing policies that ensure compliance with data protection legislation, information security standards, and best practice in records management.

You will lead the development and implementation of enterprise-wide strategies for information assurance and cyber security, working closely with senior stakeholders, including SIROs and Caldicott Guardians. As DPO, you will act as the Council’s primary contact with the Information Commissioner’s Office (ICO) and lead responses to data breaches and information risk assessments.

Key Responsibilities

• Act as the Council’s statutory Data Protection Officer, ensuring compliance with all relevant legislation and standards.
• Lead the strategic development of information governance, assurance, and security policies and frameworks.
• Direct the Council’s approach to cyber security, including oversight of the Security Operations Centre.
• Promote a culture of compliance and transparency across the organisation through education, training, and stakeholder engagement.
• Lead the response to data breaches and coordinate risk assessments and mitigation strategies.
• Build and maintain strategic relationships with senior stakeholders across the Council and external regulatory bodies.
• Inspire and lead a team of Information Governance Specialists, fostering a culture of continuous improvement and professional development.

About You We’re looking for someone who brings:

• A degree or equivalent experience, with relevant certifications in data protection, information governance, or cyber security.
• Extensive experience in leading information governance and assurance functions at a strategic level.
• A deep understanding of data protection legislation, information security frameworks, and risk management.
• Strong leadership and stakeholder management skills, with the ability to influence at the highest levels.
• A proven track record of developing and implementing enterprise-wide strategies that align with organisational goals.

Please view Job Profilehere

For an informal discussion about the post, please contact Mark.Duff@havering.gov.uk

The closing date for the receipt of applications is 27th July 2025 however interest in this job may be high and we therefore reserve the right to close the vacancy early.

You will be notified if your application has been successful. Interview date to be confirmed.

Should you require any help or advice with your online application, please contact the Recruitment Helpdesk on 01708 432770

Additional Information

We want everyone to choose Havering. When you apply for a job with us, your application is considered on its merits regardless of your age, disability, ethnicity, faith, gender identity or sexual orientation. Our residents and service users come from all walks of life, and so do our employees. Find out what it means to Choose Havering.

The London Borough of Havering has important responsibilities for safeguarding and promoting the welfare of children, young people and vulnerable adults. If you are appointed to a job that involves working with these groups, you may be subject to a Disclosure and Barring Service (DBS) check.

Please attach your supporting statement, explaining in no more than x2 A4 sides why and how you meet the criteria for this role.

We practice anonymised recruitment. Please ensure that you remove all personal information from any documents that you upload.