Information Governance Manager

Join YHA as our Information Governance Manager and play a pivotal role in shaping how we protect, manage and use data across our organisation. As the lead authority on data protection and information governance, you'll ensure compliance with UK GDPR, guide colleagues at all levels, and embed a culture of responsible data use.

Working closely with senior technology leaders, you'll oversee governance frameworks, manage information risks, and act as our key contact with the ICO, while supporting innovation in areas such as AI and digital delivery., * Act as YHA's lead authority on information governance and data protection, ensuring compliance with UK GDPR, PECR, and related regulations

• Provide expert advice and practical guidance to senior leaders and colleagues on data protection and privacy matters
• Lead and deliver the organisation's data protection compliance programme, including maintaining records, registers, and audit trails
• Chair the Information Governance Group, driving organisation-wide engagement and accountability for data protection and information security
• Manage and respond to data subject rights requests, complaints, and external enquiries, ensuring timely and compliant outcomes
• Oversee relationships with regulators, acting as the primary contact with the Information Commissioner's Office (ICO)
• Review and approve third-party data processing arrangements, ensuring contracts and compliance requirements are met
• Develop, implement, and maintain data protection, IT, cyber security, and AI governance policies and procedures
• Lead incident response planning and management for data breaches and IT incidents, including reporting and post-incident improvements
• Design and deliver training, awareness, and communications programmes to promote a strong culture of data protection and information governance across YHA

Do you have experience in Incident response?, * Strong knowledge of UK data protection legislation (including UK GDPR and PECR), with proven practical experience in an information governance or data protection role

• Experience of implementing and monitoring compliance frameworks across a complex or multi-site organisation
• Demonstrable experience engaging with regulatory bodies, particularly the Information Commissioner's Office (ICO)
• Proven ability to develop, maintain and embed data protection, IT, and information governance policies and procedures
• Experience managing data breaches or IT incidents, including developing and testing incident response plans
• Understanding of emerging technologies such as AI and their implications for data protection, privacy, and organisational risk
• Strong stakeholder management and influencing skills, with the ability to advise and challenge senior leaders
• Excellent communication skills, with the ability to translate complex regulatory or technical information into clear, accessible guidance
• Experience designing and delivering training and awareness programmes, including e-learning content
• Demonstration of our HEART values - they're part of everything we do, and we look for people who bring them to life in their everyday work

Pulled from the full job description

• Employee discount
• Employee assistance programme, Join our team and enjoy a range of exclusive staff benefits that support your well-being and career growth:
• 10 nights free hostel stays per year for you and up to 3 friends or family
• Access to YHA's staff discount and cash back portal
• Free YHA Membership each year
• Access to support via our Employee Assistance Program

There are many more benefits to working for YHA so please visit our YHA Jobs website for more information.

YHA is a social enterprise with a mission to enrich the lives of all, especially young people. YHA does this by providing brilliant hostel stays and experiences that improve physical health, mental wellbeing and life skills.