Information Governance Officer

LOCATION: Homebased with a requirement to travel to UKROEd Head Office in Manchester for team meetings and as otherwise operationally required.

HOURS 37.5 (Negotiable)

SALARY £45,320

VETTING REQUIREMENTS (Essential) Baseline Personnel Security Standard and Non-Police Personnel Vetting (Level
3)

UKROEd Ltd is a private, not-for-profit company responsible for the delivery, management and administration of the National Driver Offender Retraining Scheme (NDORS) on behalf of the Police service. It is the operating company of the Road Safety Trust and is committed to the education and training of drivers who commit low level traffic offences.

UKROEd values and respects each individual employee, client and customer and is committed to promoting equal opportunities throughout its workforce. As such, all relevant applicants will receive consideration for employment without regard to age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex or sexual orientation.

The Road Safety Trust is the UK’s largest independent road safety grant‑giving charity, dedicated to achieving zero deaths and serious injuries on UK roads. It funds innovative projects, research, and initiatives to improve road safety for all road users. Its mission is to work with partners across the public, private, and voluntary sectors to reduce road harm and enhance public safety on the roads.

Surplus funds from UKROEd activities from the delivery and management of the National Driver Offender Retraining Scheme (NDORS) are donated to The Road Safety Trust at the end of the financial year. This enables the Trust to carry out its grant‑making programme.

Part of the UKROEd Digital and Data team, the Information Governance Officer contributes to ensuring that both RST and UKROEd manage its information securely, lawfully, and effectively across its entire lifecycle. The role covers compliance with UK data protection laws and Freedom of Information regulations, records management and confidentiality standards.

The postholder will shape and implement policies, handle data protection enquiries including subject access and FOI requests, support data protection impact assessments, participate in third party audits, investigate breaches and provide staff training to promote best practice.

Appointment to this role is subject to the successful completion and maintenance of Non-Police Personnel Vetting (NPPV) Level 3.

• The first point of contact for general data protection enquiries, individual information rights requests (such as subject access requests) and freedom of information (FOI) requests from clients and stakeholders of the NDORS scheme and staff of both UKROEd and RST.
• The first point of contact for information breaches, effectively escalating to the Head of Data/ CIO when required.
• Responsible for monitoring RST and UKROEd adherence to UK GDPR and other statutory obligations and procedural requirements, working with colleagues to maintain the ROPAs, Privacy Notices, DPIAs and Information Sharing Agreements of both organisations.
• Contribute to, and sometimes lead, the development, implementation and review of IG policies and procedures.
• Manage data breaches, investigate incidents, advise on ICO reporting, propose mitigation.
• Assist the team and organisation with internal & external reviews and audits, including reviewing information governance documentation of key stakeholders as part of the Annual Provider Review (APR) process.
• Support the application and maintenance of effective system access and document and record management arrangements.
• Provide an ongoing programme of best‑practice data protection and information governance training, updating material following incidents/ lessons learned and/or to reflect legislative changes to internal staff and appropriate stakeholders.
• Challenge practices, processes, and procedures as required, using negotiation and specialist knowledge to achieve continual improvement and compliance.
• Keep up to date with developments in information governance and data protection…