Senior Information Governance Officer

The Senior Information Governance (SIG) Officer will report to the Head of Information Governance as part of a team responsible for ensuring that the Council is compliant with Information Laws; this includes but is not limited to the Data Protection Act 2018 (DPA), UK-GDPR, the Freedom of Information Act 2000 (FOI), the Environmental Information Regulations 2004 (EIR) and the Privacy and Electronic Communications Regulations (PECR).

The primary role of the post holder is to support the overall development, management and delivery of the Council’s IG Strategy and work programmes; to oversee data processing practices, ensuring that they meet all statutory requirements, the provision of advice, guidance, and auditing ensuring compliance with the legislations and any requirements of the Information Commissioner, as the Supervisory Authority.

To ensure the provision of high-quality comprehensive Information Governance & Data Protection advice and service to Medway Council and under Shared Service Agreement to Gravesham Borough Council in order to maintain compliance with the UK GDPR and other information laws.

Deputise as Data Protection Officer for both Councils in the absence of Head of Information Governance (DPO) and provide support as required to ensure consistency of standards are maintained

Manage Information Governance assessments, strategies, roadmaps, organisational design and program design and implementation spanning the discipline of records management, privacy, information security and information technology to ensure privacy by default and design is captured.

Play a key role in advising and supporting the maintenance of Records of Processing Activities for each service area within the council(s) to ensure documentation and record keeping remains accurate at all times. Developing standards, processes and best practice materials for Data and Information Governance to meet the requirements of data protection laws as they evolve and advising on how to apply these into individual service areas in a sustainable manner.

Provide support for internal audits regarding compliance against policies and standards around data and information protection to enable the auditors to assess gaps accurately.

Promote the establishment of accountability for key data assets through clear definition and formalisation of roles and responsibilities. Provide guidance to Information Asset Owners in fulfilling their roles and setting realistic goals and objectives. This is to ensure appropriate support is provided to the data protection champions where necessary.

Managing high risk privacy and data impact assessments and supporting the service areas in identifying and management of the risks to ensure the risk where possible is minimised if not fully mitigated. To handle a personal caseload of complex Information Governance matters such as investigation into complaints, incidents and breaches relating to Data Protection Act 2018 and/or the UK GDPR, other policies and procedures as set within the council(s) information governance standards.

If you would like to have an informal discussion with the recruiting manager, please e-mail Tejinderpreet Lalli on tejinderpreet.lalli@medway.gov.uk

Career Progression Frameworks (CPF) have been introduced for all roles at Medway Council. These frameworks provide a mechanism for employees to take ownership of their development within their post and be rewarded accordingly. The salary you will be offered will be at level A. There will be further opportunity once in post to progress from level A to B, and B to C.

When writing your application, it is important to ensure you identify your suitability against the requirements of the job profile, as this information will be used for shortlisting and may contribute to the CPF assessment. Your application may be rejected if the minimum required criteria is not met. Further information relating to the requirements for this role can be found in the CPF Guidance document attached.

The person specification of a job profile is split into three levels:

Level A details the essential criteria that all applicants must be able to demonstrate through their application and interview.

Level B details the developed competencies that an individual who is practised in this role would be able to demonstrate and will be a progression of knowledge, experience and skills from level A.

Level C requires the highest level of competence and applicants would need to fully meet and demonstrate all aspects of the job profile, including qualifications, knowledge, skills and experience.

We are seeking a Senior Information Governance Officer to join the team at level A. This is the entry point of the role, so you will need to be able to demonstrate the relevant knowledge, experience and skills to get you started, but you will be supported to develop in your role through induction, probation and a supportive Performance Appraisal and Career Conversation. All elements of level A listed within the person specification are essential. Through your induction you will be introduced to the Career Progression Framework (CPF), which will help you to identify your areas of strength and any development needs.

Important Information-

• Applicants must be able to demonstrate all criteria at level A which are essential for appointment to the role.

• Medway Council is not able to provide a Certificate of Sponsorship, so candidates must already possess the right to work in the UK.

• For further information, and for details of the benefits of working for Medway Council, please refer to the Medway information pack available as a download or to view online.

• Please be advised that if you are not contacted within 3 weeks of the advert closing date then you have not been shortlisted. All recruitment correspondence, including interview letters and contracts of employment will usually be sent out via email.

• We reserve the right to close this vacancy at any time prior to the closing date.

Please visit http://www.mindfulemployer.net/ for information on how Medway Council put good practices in place to ensure employees and job applicants who declare mental health issues receive the right level of support.