Information Governance Manager

Information Governance Manager

Remote/Hybrid – Occasional need to travel to Head Office in Matlock (DE4 3YH
) for meetings (1-2 days a month).

Permanent contract, part time, 25 hours per week.

£44,000 - £48,000 per annum pro rata.

Join YHA as our Information Governance Manager and play a pivotal role in shaping how we protect, manage and use data across our organisation. As the lead authority on data protection and information governance, you'll ensure compliance with UK GDPR, guide colleagues at all levels, and embed a culture of responsible data use.

Working closely with senior technology leaders, you'll oversee governance frameworks, manage information risks, and act as our key contact with the ICO, while supporting innovation in areas such as AI and digital delivery.

We welcome applicants from all backgrounds.

• 10 nights free hostel stays per year for you and up to 3 friends or family
• Access to YHA's staff discount and cash back portal
• Free YHA Membership each year
• Access to support via our Employee Assistance Program

• Act as YHA's lead authority on information governance and data protection, ensuring compliance with UK GDPR, PECR, and related regulations
• Provide expert advice and practical guidance to senior leaders and colleagues on data protection and privacy matters
• Lead and deliver the organisation's data protection compliance programme, including maintaining records, registers, and audit trails
• Chair the Information Governance Group, driving organisation-wide engagement and accountability for data protection and information security
• Manage and respond to data subject rights requests, complaints, and external enquiries, ensuring timely and compliant outcomes
• Oversee relationships with regulators, acting as the primary contact with the Information Commissioner's Office (ICO)
• Review and approve third-party data processing arrangements, ensuring contracts and compliance requirements are met
• Develop, implement, and maintain data protection, IT, cyber security, and AI governance policies and procedures
• Lead incident response planning and management for data breaches and IT incidents, including reporting and post-incident improvements
• Design and deliver training, awareness, and communications programmes to promote a strong culture of data protection and information governance across YHA

• Strong knowledge of UK data protection legislation (including UK GDPR and PECR), with proven practical experience in an information governance or data protection role
• Experience of implementing and monitoring compliance frameworks across a complex or multi-site organisation
• Demonstrable experience engaging with regulatory bodies, particularly the Information Commissioner's Office (ICO)
• Proven ability to develop, maintain and embed data protection, IT, and information governance policies and procedures
• Experience managing data breaches or IT incidents, including developing and testing incident response plans
• Understanding of emerging technologies such as AI and their implications for data protection, privacy, and organisational risk
• Strong stakeholder management and influencing skills, with the ability to advise and challenge senior leaders
• Excellent communication skills, with the ability to translate complex regulatory or technical information into clear, accessible guidance
• Experience designing and delivering training and awareness programmes, including e-learning content
• Demonstration of our HEART values - they're part of everything we do, and we look for people who bring them to life in their everyday work