Information Governance Manager & Data Protection Officer

To lead the Services Information Governance function at a tactical level to support

compliance with applicable data protection and transparency legislation; and records

management;

To act as the Data Protection Officer (DPO) as required by Article 37 of the General Data

Protection Regulation (GDPR);

To provide expertise and advice relative to Information Governance compliance across

all aspects of Services business including data protection, transparency and records

management;

To advise the Senior Leadership Team (SLT) on information risk and implement

organisational control measures; and

To support initiatives for continuous improvement including Digital Transformation and

Artificial Intelligence (AI); and where required to manage projects.

Support development of Service Policy; and to create, review and maintain effective,

relevant and understandable Service Procedures and guidance relating to Information

Governance functions.

Promote a strong culture of information responsibility across the Service and ensure that

Information Governance considerations are embedded into strategic decision-making,

Service design, transformation programmes, procurement, digital services and day-to-day

operational activity.

Develop and deliver the Information Governance department plan, monitoring progress

and performance seeking continuous improvement.

Support Digital Transformation and development of use of Artificial Intelligence and

emerging technologies in Service processes; to ensure Service compliance and assurance.

Actively engage and contribute at the Tactical Management Team and Middle

Managers meetings, and any other forums commensurate with the role.

Identify, and monitor budgets within the Information Governance department ensuring

procurement of goods and services complies with financial regulations.

Monitor compliance with applicable Information Governance legislation.

Identify, evaluate, recommend, and implement improvements to personal data and non

personal information processing activities; internally and when in collaboration with

partners.

Identify, develop, deliver, and monitor the effectiveness of Information Governance

training to all employees and other stakeholders as required.

Lead and ensure the identification, development and review of Data Protection Impact

Assessments (DPIAs), ensuring risks are appropriately assessed and proportionate control

measures are identified, implemented and monitored.

Lead the production and ongoing management of the Corporate Register of Processing

Activities (ROPA), taking responsibility for ensuring it is fully populated, risk assessed,

accurate, up to date and effectively managed.

Take lead responsibility for managing and delivering all Rights of Access requests relating

to personal and non-personal information, ensuring each request is appropriately and

securely processed and completed within the required legal timeframes.

Lead and undertake the investigation and management of personal data breaches and

breaches of data protection principles, including recording and assessing associated risks.

Contribute to wider investigations into security breaches and data loss.

Lead the production and ongoing management of Fair Processing and Privacy Notices.

Lead, produce and review Memorandum Of Understandings and Information Sharing

Agreements where personal information is processed with partners and other

organisations.

To guide and provide assurance to the Service that fair and lawful exchange of data and

information is achieved with partners and other organisations.

Establish standards for the creation, classification, retention, storage, retrieval, archiving

and secure disposal of records; support Record Owners in managing lifecycle.

Act as the Service point of contact for the Information Commissioner in the statutory role of

Data Protection Officer.

Review legal contracts for new procurements, the provision of services, Data Processors

and Controller agreements; advising the Service Procurement Team on Information

Governance matters.

Publish and maintain accurate, relevant and timely information on the Services intranet

Portal pages; and external Service website including maintaining the transparency

Publication Scheme.

To provide timely reports on Information Governance related performance, accessible to

managers and members of the Combined Fire Authority.

Line manage the Information Governance Officer (Deputy Data Protection Officer) and

lead the Service Information Team (SIT) and Reception, providing overall departmental

oversight and accountability.

Develop relationships with colleagues, external stakeholders, suppliers, and others as

appropriate to enable the delivery of the Information Governance function.

Represent the Service on any relevant national, regional and local bodies related to the

role.

To undertake and support a variety of project roles internally and externally to achieve

Service objectives.

Leicestershire Fire and Rescue Service is committed to promoting equality, diversity and inclusion in the workplace. Furthermore, we want to create a work environment where everyone feels safe, can be themselves and can perform their roles to the best of their abilities. We have signed up with a number of nationally recognised organisations that promote equality, diversity and inclusion and we are working with them to help us achieve our objectives.

Employers Network for Equality and Inclusion

Department of Works and Pensions Disability Confident scheme

We are committed to safeguarding and promoting the welfare of children, young people, and vulnerable adults. Safer recruitment practices, including identity, reference, and appropriate criminal record checks, will be applied throughout the recruitment process.

Please take note that Leicestershire Fire and Rescue Service does not hold a UK Visa & Immigration (UKVI) Skilled Worker License sponsor and are unable to sponsor any individuals for Skilled Worker Sponsorship.

Qualifications

Desirable: - Degree or other relevant academic qualification.

Experience

Skills