Information Governance Lead

**Details**:
**Reference number**:

- 275784**Salary**:

- £37,683 - £41,506**Job grade**:

- Senior Executive Officer- SEO**Contract type**:

- Permanent**Type of role**:

- Governance
- Other**Working pattern**:

- Flexible working, Full-time, Job share, Part-time**Number of jobs available**:

- 1Contents

Location

About the job

Things you need to know

Location
- This position is based at Oystermouth Rd, Maritime Quarter, Swansea SA1 3SNAbout the job

**Job summary**:

- Please refer to Job Description**Job description**:
**Purpose of the post**

At the IMA, we are committed to ensuring that all our data is protected, and that we comply with our duties under Data Protection law (including the Data Protection Act and GDPR Regulations).

We are seeking an Information Governance Lead to help us improve our management of potentially sensitive information, carry out internal security reviews, and act as the main point of contact between the IMA and data protection authorities, such as the Information Commissioner’s Office (ICO). Our ideal team member will have excellent organisational, communication, and management skills, and the ability to lead training sessions and workshops with members of staff.

You’ll often be asked to work independently in this role, but also to communicate with all relevant stakeholders as you promote a culture of data protection compliance within the organisation.

**Pwrpas y swydd**

Yn yr IMA, rydym wedi ymrwymo i sicrhau bod ein holl ddata yn cael ei ddiogelu, a'n bod yn cydymffurfio â'n dyletswyddau o dan gyfraith Diogelu Data (gan gynnwys y Ddeddf Diogelu Data a Rheoliadau GDPR).

Rydym yn chwilio am Arweinydd Llywodraethiant Gwybodaeth i'n helpu i wella ein rheolaeth ar wybodaeth a allai fod yn sensitif, cynnal adolygiadau diogelwch mewnol, a gweithredu fel prif bwynt cyswllt rhwng yr IMA ac awdurdodau diogelu data, megis Swyddfa'r Comisiynydd Gwybodaeth (ICO). Bydd gan ein haelod tîm delfrydol sgiliau trefnu, cyfathrebu, a rheoli rhagorol, a'r gallu i arwain sesiynau hyfforddi a gweithdai gydag aelodau o staff.

Yn aml, gofynnir i chi weithio'n annibynnol yn y rôl hon, ond hefyd i gyfathrebu â'r holl randdeiliaid perthnasol wrth i chi hyrwyddo diwylliant o gydymffurfio â diogelu data o fewn y sefydliad.

You will act as the IMA’s designated Data Protection Officer (DPO) as defined under the EU General Data Protection Regulations (GDPR):

- Monitoring compliance with the Regulation and other applicable laws and regulations and with the relevant policies of the data controllers, this includes assignment of responsibilities, awareness and training, and relevant assurance.
- Liaising with the Information Commissioner’s Office as required (Article 39) (1) (a) - (e)
- Advising on the data protection impact assessment (DPIA) and monitor its performance.
- Informing and advising the data controllers and employees of their obligations under the Regulation and other applicable laws and regulations

The DPO will be the main point of contact for the Information Commissioner’s Office and for relevant individuals whose data is processed (e.g. employees and EU citizens).

**Swydd Ddisgrifiad**

Byddwch yn gweithredu fel Swyddog Diogelu Data dynodedig yr IMA (DPO) fel y'i diffinnir o dan Reoliadau Diogelu Data Cyffredinol yr UE (GDPR):

- Monitro cydymffurfiaeth â'r Rheoliadau a chyfreithiau a rheoliadau perthnasol eraill a chyda pholisïau perthnasol y rheolwyr data, mae hyn yn cynnwys neilltuo cyfrifoldebau, ymwybyddiaeth a hyfforddiant, a sicrwydd perthnasol.
- Cysylltu â Swyddfa'r Comisiynydd Gwybodaeth yn ôl y galw (Erthygl 39) (1) (a) - (e)
- Cynghori ar yr asesiad effaith diogelu data (DPIA) a monitro ei berfformiad.
- Hysbysu a chynghori rheolwyr data a gweithwyr ynghylch eu rhwymedigaethau o dan y Rheoliadau a chyfreithiau a rheoliadau cymwys eraill

Y DPO fydd prif bwynt cyswllt Swyddfa'r Comisiynydd Gwybodaeth ac i unigolion perthnasol y caiff eu data ei brosesu (e.e. gweithwyr a dinasyddion yr UE).

**Key Responsibilities**
- Maintain the IMA’s registration with the Information Commissioner’s Office.
- Ensure that the IMA complies with all legal requirements including the Data Protection Act, General Data Protection Regulations 2018, Records Management standards, Freedom of Information and all other relevant national standards.
- Design, develop and oversee the implementation of overall Information Governance and Records Management across the IMA and report on this work to the IMA’s SIRO.
- Lead on co-ordinating responses to Freedom of Information and Subject Access Requests in the legislation and statutory timescales.
- Monitor compliance with the GDPR and data protection laws, including managing internal data protection activities and records management,
- Lead on conducting privacy impact assessments and to monitor subsequent performance, including identifying trends in GDPR and information risk.
- Pro-actively assess and manage GDPR related risk an