Information Governance Officer

We are seeking an Information Governance Officer (IGO) with specialist knowledge and experience to join our Information Assurance and Compliance team. This is a full-time post but can also be offered part-time at no less than 0.8 FTE. As a key member of the team, you will independently manage and develop a defined information-governance portfolio, providing specialist advice on complex, sensitive and non-routine matters across the University. You will support the University in meeting its statutory, regulatory and contractual obligations through specialist advice, complex casework, assurance and improvement activity. Your managed portfolio will include data protection, privacy and information rights under the UK GDPR, Data Protection Act 2018 and Privacy and Electronic Communications Regulations 2003 (PECR), including relevant changes introduced by the Data (Use and Access) Act 2025, alongside the Freedom of Information Act 2000 and Environmental Information Regulations 2004. You will also advise on the information-governance implications of AI, including relevant requirements of the EU AI Act and others where applicable. You will provide practical advice on procurement, suppliers, contracts, research, data sharing and international transfers. You will manage assigned information-rights casework, coordinate the information-governance response to assigned incidents, lead assigned projects and improvement work, and contribute to assurance reviews, guidance and training. Knowledge of relevant information-security and privacy standards, including ISO 27001, ISO 42001 would be advantageous, as would familiarity with the Payment Card Industry Data Security Standard (PCI DSS)., We support hybrid working. While our team is based at the Headington Campus in Oxford, we are happy to explore flexible arrangements that balance remote work with time spent on campus to foster team engagement and collaboration. There is an expectation to be on campus at least one day per week.

You will combine independent specialist judgement with a collaborative approach, working effectively with academic and professional-service colleagues, technical specialists, legal advisers and suppliers. You will take ownership of complex matters, manage competing priorities and recognise when further advice, authorisation or escalation is required. You will bring:

• Substantial specialist experience in the field of information governance, data protection and/or information security within a complex landscape.
• Ability to interpret and apply complex legislation, regulatory guidance and professional standards independently.
• Experience of managing complex, sensitive or high-risk matters and translating legal, regulatory and risk requirements into clear advice and practical recommendations.
• Experience of managing a workload of compliance, assurance or improvement projects or activities.

PLEASE NOTE: This is an internal advert and is open to current Oxford Brookes University staff only. At Oxford Brookes University, we take immense pride in the outstanding experience we offer our staff. You’ll become part of a welcoming, professional community where every individual is valued and recognised as integral to our collective success. As a modern, forward-thinking institution, we are deeply rooted in a city renowned for its rich cultural and academic heritage. Oxford Brookes is globally recognised for its commitment to high-quality teaching, impactful research, and delivering an exceptional student experience. Our vision is clear: to shape tomorrow through a unique blend of the modern and the traditional, by embracing diversity, seeking innovation, and excelling in education and research., Inclusivity is one of our five guiding principles at Oxford Brookes. We are committed to creating an environment where everyone is celebrated, valued, and given equal opportunities. We encourage applications from all suitably qualified candidates who share our values, regardless of background.