Information Governance Lead

Job title:

Information Governance Lead

Reporting to:

TBC

Responsible for:

Review and ensure compliance against information classification policies, standards, and procedures

Based at:

Remote with travel to London and Portsmouth as required

Scope:

The role acts as the bridge between Security, Risk, Compliance, IT, Data Protection, and Business Operations to ensure information is appropriately classified, protected, and managed throughout its lifecycle

The Information Governance Lead is responsible for developing, implementing, and maintaining the organisation's information governance framework, ensuring that information assets captured digitally are managed securely, compliantly, and effectively throughout their lifecycle. The role provides leadership on data governance, records management, information security, privacy, retention, and regulatory compliance while enabling the organisation to maximise the value of its information assets.

• Review existing information classification policies, standards, and procedures.
• Conduct organisation-wide reviews of document, data, and digital asset classification compliance.
• Develop remediation plans and prioritised improvement roadmaps
• Ensure alignment with information security, data protection, records management, and regulatory obligations
• Coordinate with business units to identify information owners and custodians
• Implement and oversee classification labelling across structured and unstructured data stores.
• Ensure metadata, labels, and protection controls are applied consistently.
• Establish processes for onboarding new information assets into the classification framework.
• Work with technical teams to align classification labels with DLP, encryption, retention, and access control policies.
• Monitor and report on classification and DLP effectiveness.
• Support business adoption of new classification processes and controls.
• Facilitate workshops and governance meetings to drive organisational alignment.
• Develop a continuous monitoring and validation framework.
• Implement regular compliance reviews and control effectiveness assessments.

• Information Governance and Records Management
• Information Security and Data Protection
• Data Classification Frameworks
• Data Loss Prevention (DLP) Technologies
• Compliance and Regulatory Requirements
• Risk Management and Control Assessment
• Business Change and Transformation
• Process Design and Business Analysis
• Audit and Assurance Management
• Stakeholder Engagement and Communication