Information Rights Manager

• Educated to degree level or equivalent.
• Relevant Information Rights management professional qualification or proven significant relevant experience.
• Proven track record of successfully managing a large numbers of requests and enquiries under the FOIA, DPA, EIRs in a similar role.
• Excellent analytical skills and sound judgement.
• Experience of building relationships and successfully collaborating with internal
  stakeholders.
• Experience of producing guidance, tools and resources for staff and members of the general public.
• Experience of dealing with a range of issues relating to information rights on a self-standing basis and a willingness to react confidently and quickly to emerging issues.
• Excellent written and oral communication skills, with an ability to prepare reports, specifications and plans and present these to variable audiences.
• Proven ability to research, analyse and present information and argument in writing and verbally.
• In-depth and up to date working knowledge of the Freedom of Information Act 2000, the General Data Protection regulation and assorted data protection laws, the Environmental Information Regulations and the associated regulatory environment.
• Excellent organisational skills: ability to manage competing demands and time-critical schedules to meet deadlines.

Working within a team of data protection and freedom of information professionals, the Information Rights Manager is responsible for supporting and helping to advise the University's Faculties,Schools, Institutes and Professional Service (PS) functions by providing expert, pragmatic, and targeted data protection and freedom of information support, guidance and training, across the University, in accordance with the relevant legislation, University policies, standard operating procedures and technical security standards.

Drawing upon prior experience in delivering data protection initiatives he/she will take data protection, freedom of information and records management action items and work with academic and professional services stakeholders to ensure that these items are effectively delivered.

Providing knowledgeable support on key data protection, freedom of information and records management processes, the Information Rights Manager will, under the direction of the Head of Information Rights, ensure that the attitudes and objectives of the baseline plan are translated into lasting and beneficial changes to the academic and business operation of the University.

The Information Rights Manager's duties will include:

• Proactively support and evidence University data protection compliance within the University by working with academic and relevant Professional Services staff.
• Day-to-day responsibility for the provision of responses to subject access requests made to UCL including determining where exemptions should be applied to withhold information.
• The management of a dedicated support team for data protection and freedom of information.
• Day-to-day responsibility for the provision of responses to Freedom of Information/Environmental Information Regulations requests made to UCL including determining where exemptions should be applied to withhold information and considering the public interest test.
• Managing requests from regulatory bodies and law enforcement agencies, exercising judgement and escalating concerns as appropriate.
• Providing expert, targeted information security and data protection support, guidance and training across the University.
• Providing ongoing support as appropriate to relevant leadership and project managers as well as the Information Security Group to ensure that new projects are appropriately risk assessed.
• Providing leadership, direction and guidance in assessing and evaluating data protection risks and monitor compliance with security standards and appropriate policies. Understand how changing risk horizons may affect the University and provide expert direction on mitigation.
• Conducting regular meetings as appropriate with stakeholders to ensure data protection provisions are included within University contracts (including data sharing and processing agreements, contractual clauses, memoranda of advice, letters, policy documentation etc.) and to review University / IT Services changes to determine the impact, improvement and continual compliance with the GDPR, Data Protection Act 2018 and obtain evidence of compliance.
• Providing regular Data Protection and other Information Governance progress reporting and metrics to the Head of Information Rights.
• Maintaining awareness of the latest external data protection, freedom of information and records management issues and best practice.
• Actively supporting the aims and objectives of the Data Protection and Freedom of Information Office and act as an ambassador for the Data Protection and Information Rights team in every interaction with University stakeholders.
• Other relevant tasks deemed appropriate by the University.