Information Governance Manager

JOB DESCRIPTION
Job Title: Information Governance Manager
Directorate & Section/Unit: CoaCh / IT and Digital / Corporate Information Governance Team Reporting to: Head of Information Governance Services
Responsible for:
Salary Grade: PO4
DMA Management Level: Level 1 Manager
DMA Span of Control (Direct Reports): *
Our People Values:
To uphold and act in accordance with Worcestershire County Council's values:
· Customer Focus - Ensure delivery of a high-quality service which meets the needs of
customers
· Can Do Culture - Be proactive to achieve excellence, finding solutions and creative
ways of working
· Freedom within Boundaries - Make constructive change through cohesive decision making, ensuring services are responsive.
Purpose of job:
· To be the deputy for the Head of Information Governance Services.
· To manage the Information and Records Management Team and provide a high quality and value for money service delivery to internal and external stakeholders.
· To provide oversight of the Information Access and Compliance Team.
· To provide expert knowledge, advice, guidance and performance assessment to stakeholders, staff, members, Senior Information Risk Owner (SIRO), Caldicott Guardian, Monitoring Officer and to other senior managers as required in respect of Data Protection legislation.
· To provide expert technical advice and guidance in respect of the Freedom of Information Act, the Environmental Information Regulations and other related legislation and regulations relating to Information risk and governance matters.
· To be the Council professional in terms of providing strategic, tactical and operational advice on all information management (IM) issues and support staff on identifying, controlling and mitigating IM issues and risks, and develop effective associated assurance processes and support services.
· To lead on the development, implementation and management of a long-term vision and strategy for IM ensuring that it is aligned with the Council’s Digital Strategy.
· To manage the Council’s Disposal Schedule and Information Asset Register governing the retention of records.
· Build a strong Information Governance (IG) culture by leading activities to embed positive IG practices amongst staff.
Main Activities & Responsibilities:
· Support the HIGS as the statutory Data Protection Officer (DPO) in their statutory duties, undertaking relevant responsibilities when the DPO is unavailable.
· To be responsible for managing and directing all staff within the Information and Records Management, and Information Access and Compliance Teams.
· To manage the Information and Records Management Team’s operations and provide a quality and resource effective records management service to the Council and Worcestershire Children First.

· To develop and deliver a corporate information governance framework to ensure effective management of information that is legally compliant and supports the strategic and business needs of the Council.
· To support the development and delivery of policies, procedures, guidance and work flows in relation to IG.
· To develop and deliver IG training and promote awareness across the Council through presentations, the intranet, workshops, eLearning modules and publications.
· To provide support and specialist IG advice to Council employees, elected members and other relevant parties by responding to queries, problems and requests in a timely fashion and providing innovative solutions to sometimes complex and unusual problems.
· To provide expert IG advice and guidance, including information legislation exemptions and exceptions, and information sharing advice, to officers to ensure IG requirements are met including information sharing activities and business processes.
· To lead commissioning resources required to support information and records management activities and lead on IG matters in other projects/commissioning work as required.
· To manage all supplier contracts associated with the information and records management function.
· Supervise the building management and maintenance for the Records Office and all storerooms.
· To manage the Corporate File Plan and information storage platforms from Microsoft 365 (Teams, SharePoint, OneDrive etc.)
· To lead on the development of Microsoft 365 as an electronic records management solution for unstructured data in the Council.
· To develop effective working relationships with relevant staff and teams across the Council to ensure records management practices comply with relevant legislation and regulations such as Freedom of Information, Data Protection, Environmental Information, Re-use of Public Sector Information, etc.
· To manage the implementation of a range of records and information management services including information audits, updating the Council’s Information Asset Register and Disposal Schedule, advice and guidance, and records management skills development.
· To review and appraise records at the disposal stage of the lifecycle with a view to their permanent preservation as part of the Corporate Memory.
· To maintain professional knowledge in direct and related areas on IG in order that the organisation changes/adapts as required.
· Responsible for the implementation of retention, archival review and disposal of paper and electronic records, ensuring compliance with relevant legislation and regulations.
· To monitor, analyse and interpret information/statistics in relation to the service area.
· To develop and implement a strategy for seamlessly transferring physical and digital corporate records to the Archive & Archaeology Service for permanent retention.
· Appropriate periodic review of security of records including appropriate access and integrity.
· To attend, or delegate relevant attendance at, meetings, participate in project boards, working group and other internal forums responsible for changes to the organisation to provide expert advice on IM and IG matters.
· Lead on high-risk investigations into information security breaches, including those escalated to the relevant independent body (e.g. ICO / Surveillance Commissioner) and ensuring lessons are learnt.
· Support the HIGS in investigating and responding to complaints about IG, liaising with the ICO when required.

· To undertake and coordinate Data Protection Impact Assessments (DPIAs) for new and existing systems / processes involving large scale processing of personal data and advise when standards are not met.
· To support the HIGS in the annual submission of the Data Security Protection Toolkit and compliance with standards and relevant security frameworks
Generic Accountabilities:
· To maintain personal and professional development to meet the changing demands of the job, participate in appropriate training activities and encourage and support staff in their development and training
· To undertake other such duties, training and/or hours of work as may be reasonably required and which are consistent with the general level of responsibility of this job
· To undertake health and safety duties commensurate with the job and/or as detailed in the Directorate’s Health and Safety Policy
· The duties described in this job description must be carried out in a manner which promotes equality of opportunity, dignity and due respect for all employees and service users and is consistent with the Council’s Equality and Diversity Policy
· The nature of the work requires duties to be undertaken which will involve lifting carrying and moving for which appropriate training will be provided. The post holder must be able to physically deliver these.
Contacts:
In all contacts the post holder will be required to present a good image of the Directorate and the County Council as well as maintaining constructive relationships.
Internal: Elected Members, Directors, Assistant Directors, Heads of Service, Senior Managers, Management Teams, Managers & Staff across all directorates, Project Staff, Head Teachers, Support and other school based staff; Information Access Coordinators; CIGB Board Members
External: Information Commissioner’s Office (ICO); District & County Councils, Government Agencies & Departments, NHS organisations, Integrated Care Boards, Police, educational settings, Suppliers, Contractors, Service providers, Statutory and Voluntary Organisations, West Midlands Information Governance Forum; Information and Records Management Society; service users, clients, customers, parents, members of the public, volunteers.
Additional Information:
· The Council reserves the right to alter the content of this job description, after consultation to reflect changes to the job or services provided, without altering the general character or level of responsibility
· Reasonable adjustments will be considered as required by the Equality Act.
Author: Becki Staite Date: 11th October 2022
Date of grading confirmation: 18th October 2022
* WCC is aiming towards a 5-level management organisational structure with level 5 being the Chief Executive.

PERSON SPECIFICATION
Job Title: Information Governance Manager
Directorate & Section/Unit: COaCH / IT and Digital / Corporate Information Governance Team Salary Grade: PO4
EXPERIENCE: (Of delivering outcome/objectives/service improvements etc, not just time served)
It is essential that the post holder has:
· Substantial experience in a professional records management / information management / information governance field.
· Substantial experience of selecting records for permanent preservation according to archival principles.
· Substantial experience of working in a multi-faceted environment and dealing with conflicting priorities.
· Substantial experience of managing document / records management systems.
· Substantial experience in the development and delivery of records management / information management / information governance strategies, policies, standards, procedures, guidance and training.
· Significant experience of driving successful improvements and change.
· Significant experience of applying data protection law, including Data Protection Act, UK General Data Protection Regulation, Freedom of Information Act, Environmental Information Regulations and other relevant legislation in a large public facing organisation.
· Significant experience of managing people to deliver transformational change.
· Significant experience of conveying complex and contentious information, formally and informally, across various levels of the organisation.
· Significant experience in leading groups of people not under their direct control.
It is desirable that the post holder has:
· Project management experience.
· Experience in contract management
KNOWLEDGE, SKILLS AND ABILITIES:
It is essential that the post holder has:
· Expert knowledge of information management / records management principles and practices and how to adapt them to a complex work environment.
· Expert knowledge of selecting records for permanent preservation according to archival principles.
· Expert knowledge of working in a multi-faceted environment and dealing with conflicting priorities.
· Expert knowledge of managing document/records management systems.

· Understanding of information technologies and data security.
· Specialist knowledge of data protection law, including Data Protection Act, UK General Data Protection Regulation, Freedom of Information Act, Environmental Information Regulations and other relevant legislation in a large public facing organisation.
· Ability to understand and interpret complex legislation.
· Ability to plan and work at a strategic level.
· Ability to deliver information governance services effectively and creatively, and within statutory framework.
· Ability to deliver and manage digital solutions for information and records management.
· Ability to work with partners to deliver consistent approach to maintaining information.
· Strong teambuilding and staff management skills with the ability to motivate, lead and develop a team, considering their personal needs as well as business objectives, and create a productive and inclusive work environment.
· An ability to interpret and convey complex and contentious information in a variety of methods appropriate to varied audiences including Councillors, and staff at all levels of the organisation
· Flexible approach to work requirements that meet the changing needs of the organisation.
· Ability to manage a diverse and varied workload with constantly changing priorities.
· Excellent communication skills, both oral and written.
· Excellent influencing skills, with a range of internal and external contacts and groups - an ability to negotiate and persuade through strength of argument.
· Ability to motivate and time manage self and others.
· Ability to identify the causes of problems and propose realistic and pragmatic solutions.
· Proactive approach to taking responsibility for seeking solutions to problems, with an adaptable working style.
It is desirable that the post holder has:
· An understanding of the wider workings of local government.
QUALIFICATIONS/TRAINING & DEVELOPMENT:
It is essential that the post holder has:
· Level 7 post graduate qualification in records management, archive administration or related information governance discipline.
· Evidence of continuing professional development and a willingness to undertake appropriate training.
· Professional qualification such as BCS Practitioner Certificate in Data Protection and/or Freedom of Information, or others that relate to Information Governance (or can demonstrate significant relevant experience)
It is desirable that the post holder has:
· Membership of a relevant professional body
ADDITIONAL INFORMATION
It is essential that the post holder has:
· Ability to travel across the County sometimes at short notice.
· Requires postholder to be able to transport equipment (which may involve an element of lifting) to undertake duties for which appropriate facilities and training will be provided.
Author: Becki Staite Date: 11th October 2022


Order # : RQ1761503
Job Title : Information Governance Manager
Job Category : IT
Category : Agency Workers
Level 1 Name : Worcestershire County Council
Client : Worcestershire County Council
Client Location : Worcester
Justification : Project with defined end date
Estimated Client Total : £18,131.75
Status : Open
IR35 Status : Inside IR35
Client Owner : Becki Staite
Client Manager : Philip Bouchier
Hours Per Week : 35.00
Start Date : 10/08/2026
End Date : 06/11/2026
Start Time : 09:00
End Time : 17:30
Worcestershire County Council is seeking an experienced Information Governance Manager to join its Corporate Information Governance Team on an agency basis for a 3-month contract.

This is an exciting opportunity for an information governance professional to support a broad range of governance, compliance and information management activities across the Council. The successful candidate will play a key role in helping to ensure the Council meets its statutory obligations while supporting organisational change as preparations continue for Local Government Reorganisation in 2028.

Key responsibilities will include:
* Providing expert advice and guidance on data protection and information governance matters
* Supporting the development and review of Information Sharing Agreements
* Completing and advising on Data Protection Impact Assessments (DPIAs)
* Drafting and reviewing Privacy Notices and other governance documentation
* Managing and responding to individual rights requests under UK GDPR
* Supporting the handling of Freedom of Information (FOI) and Environmental Information Regulations (EIR) requests
* Investigating and responding to information security incidents and data breaches
* Providing information governance support to corporate projects and transformation programmes
* Contributing to information and records management initiatives across the Council

This is a hybrid role that can be fulfilled both remotely and in the Council’s Worcester based office.