Information Governance Manager

To lead and ope rationalise information governance (IG), data protection, and privacy-by-design practices across the organisation. The role ensures robust handling of personal and sensitive data, high-quality DPIAs and data sharing governance, and strong compliance with UK GDPR and related legislation.

The postholder will also support the Director of Governance and Assurance in maintaining and developing accredited management systems, including ISO 27001 and ISO 9001, and play a key role in supporting the organisation’s journey toward ISO 42001 for responsible AI and AI governance.

• Lead day-to-day information governance activities and act as a subject matter lead on data protection and privacy.
• Lead and quality assure Data Protection Impact Assessments and associated documentation.
• Monitor and track DPIA and DSA actions through to completion.
• Develop, maintain, and embed IG policies, standards, and guidance.
• Support organisational compliance with UK GDPR, Data Protection Act 2018, and related legislation. Identify emerging IG and data ethics risks.
• Provide practical advice to teams on lawful and ethical data use.
• Maintain records of processing activities where required.
• Engage with partners and third sector organisations to ensure appropriate IG standards in data sharing.

• Assist the Director of Governance and Assurance with maintaining ISO 27001 and ISO 9001 management systems.
• Assist in implementing controls aligned to ISO 42001.
• Support internal audits, evidence gathering, and corrective action tracking.
• Contribute to policy, process, and control development aligned to ISO standards.
• Support development of governance frameworks for responsible and ethical AI use.
• Contribute to AI risk assessments, transparency documentation, and accountability frameworks.
• Promote principles of fairness, transparency, explain-ability, and human oversight in AI-enabled work.

• Deliver IG and data protection awareness sessions.
• Provide guidance and coaching to project and operational teams.
• Help foster a culture of responsible data use and ethical decision-making.

• Prepare IG reports and dashboards for leadership.
• Maintain clear, auditable documentation and evidence trails.
• Support governance forums and management reviews.

We’d love to hear from you if you have:

• Strong practical knowledge of UK GDPR and Data Protection Act 2018.
• Familiarity with responsible AI, AI governance, or data ethics frameworks.
• Experience conducting and reviewing DPIAs.
• Experience developing or applying IG frameworks in operational settings.
• Ability to translate legal and governance requirements into practical guidance.
• Strong stakeholder engagement and communication skills.
• Organised and detail-oriented with good documentation discipline.
• Degree or equivalent experience in a relevant field.

• Degree or equivalent experience in a relevant field.
• Data protection or IG qualification.
• SO internal auditor training desirable.
• Experience supporting ISO 27001 or ISO 9001.
• Awareness of ISO 42001 or emerging AI governance standards.
• Experience in public sector or multi-agency data environments.

This is a hybrid role based in our office in London (Borough). You would be expected to be able to work from the office at least 1-2 days per week. Some travel is also required for on-site client engagements as needed.

• Competitive salary reviewed annually
• Work for a passionate, mission-driven company solving society’s big problems
• Work flexible hours around life commitments with a focus on delivering company value rather than hours worked
• Ability to work remotely (excluding face-to-face Team Meetings and client meetings)
• Training and development opportunities
• 25 days annual leave (plus bank holidays)
• Company pension
• Private medical insurance
• Generous enhanced parental leave policies
• Cycle to work scheme
• Eye Test and contribution towards Glasses for VDU use
• Employee Assistance Programme
• Mental health and wellbeing support
• Remote GP access
• Counselling/therapy
• Physiotherapy
• Medical second…