Information Risk Officer

## Information Risk Officer Apply locations:
HU1time type:
Full time posted on:
Posted Todaytime left to apply:
End Date: 11 June 2026 (13 days left to apply) job requisition :
JR0000367
** Number of Vacancies:
** 1
* * Time Type:
** Full time
** Worker Type:
** Regular
* * Proposed Interview Date:
** Monday, June 22, 2026
** Hours of Work:
** 37
* * Hiring Manager:
** James Strange way
** Contact Number:
*** Job Description

Summary:

** This is Fixed Term Full Time Position (Maternity Leave)    Interview Dates - week commencing 22 June 2026    A great opportunity has arisen for the right person to join the Information Governance team within the Town Clerks Service as our Information Risk Officer for 6 months.
We are looking to appoint a motivated, enthusiastic, experienced, and appropriately skilled individual to manage our data breach incidents and lead our Information Governance Officers. Primary responsibilities include the triage and resolution of data breach incidents and the implementation of recovery actions and process changes to mitigate future risks. You must also be able manage and support the delivery of Information Rights cases, leading a small team.

You will work with the Information & Data Protection Manager to manage corporate information risks, developing and maintaining policies and procedures covering data protection, information security, information rights and information risk.
You will have Information Governance qualification(s) at HND/HNC level, including the UK GDPR at practitioner level, or extensive experience delivering Information Governance functions in a UK public sector environment. You will be able to provide expert advice and support to junior colleagues on the Freedom of Information Act/Environmental Information Regulations, the UK General Data Protection Regulation, Data Protection Act 2018, Data (Use and Access) Act and associated UK legislation and regulation.
ROLE AND PURPOSE  Develops and oversees the corporate approach to information governance standards to maintain the safety and security of the Council’s data. Promotes and monitors corporate information risk management with particular focus on data security, lawful and fair processing and the reporting and management of security incidents.
Directly contributes to Information Security policies, procedures and frameworks, working closely with the Information Governance & Data Protection Manager and the ICT Service. Proactively raises awareness of information security risks and threats using a range of tools including e-learning, security bulletins and briefing sessions.
Advises social care colleagues and the Caldicott Guardians to maintain compliance with relevant health data standards, including the NHS Data Security and Protection Toolkit. Manages and develops the Council’s Information Security Incident management process, Acting as the Council’s point of contact with the Information Commissioner’s Office (ICO) and/or the Police on serious data breach and information security matters. Determines whether serious incidents meet the legal threshold for reporting to the ICO.

Creates data breach monitoring reports and leads the risk monitoring discussion at Information Governance Group meetings.
Provides leadership and line management to the Information Governance Officers in responding to information requests and information security matters. Ensures statutory deadlines are met, regulatory compliance is maintained, and the Council complies with Court/CPS requirements. Works closely with partner organisations to address risk and develop and implement safe practice for information sharing and data transfer.##
** PRINCIPAL

ACCOUNTABILITIES :
** 1. To promote and safeguard the welfare of children, young people and/or vulnerable adults.
2.
** Customer Focus –
*** Works directly with victims of data breaches to provide support and assurance in the aftermath of incidents.  Leads and supports service area colleagues in the Council’s responses to data breaches to ensure victims receive appropriate ongoing support, immediate risks to them and their personal data are mitigated, and matters are escalated to the Police or Information…