Information Rights Officer

Morgan Hunt are currently working with a Leading National Charity in their search for an Information Rights Officer to join their Data Protection and Compliance team on an initial 6-month Fixed Term Contract, with potential for extension.

This is an excellent opportunity for an experienced Information Rights, Data Protection or Information Governance professional to join an organisation working directly to support children, young people and families. The role will involve managing sensitive and often complex information rights and disclosure requests, where the information being handled can relate to children, families and safeguarding matters. As a result, the successful candidate will need to demonstrate strong judgement, discretion and an understanding of the importance of handling personal information appropriately.

The role will have a particular focus on Data Subject Access Requests (DSARs) and other information rights and disclosure activity. You will be responsible for managing requests through the full process, including identifying and collating relevant information, considering exemptions, undertaking redactions and coordinating appropriate disclosures. You will also work closely with colleagues across the organisation and external stakeholders where information needs to be obtained or shared.

Alongside information rights casework, the role will provide wider support across data protection and compliance, including data breach investigations, privacy assessments, information sharing and maintaining key information governance records.

We are looking for an experienced Information Rights / Data Protection / Information Governance professional who has practical experience managing information rights requests and applying data protection legislation. This is a hands-on role suited to someone who is comfortable working independently, managing sensitive casework and applying data protection legislation to practical situations.

Job Title: Information Rights Officer

Duration: 6-month Fixed Term Contract, with potential extension

Location: Remote/Office Working (Flexible)

Salary: £28,337 - £34,851 per annum (including London Weighting, if applicable)

Hours: Full-Time (37.5 hours per week)

Key Responsibilities

Manage Data Subject Access Requests (DSARs) from receipt through to completion, ensuring statutory deadlines and internal processes are followed.

Undertake searches, information gathering and collation to identify relevant personal information.

Consider and apply appropriate exemptions, redactions and disclosure requirements.

Manage information sharing and disclosure requests from external organisations, including statutory agencies and other relevant bodies.

Support the handling of court and legal disclosure requests, working closely with the in-house Legal Team where required.

Provide practical advice and guidance to colleagues on UK data protection and information rights legislation.

Ensure information rights requests are accurately logged and appropriately managed through internal systems.

Support the investigation and triage of personal data and information security breaches, escalating issues where appropriate.

Assist with Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs) and other data protection risk assessments.

Support the maintenance of key information governance records, including information request and data breach logs.

Assist with the review and development of data protection policies, procedures and guidance.

Keep up to date with developments in data protection legislation and relevant regulatory guidance.

Provide training, guidance and support to colleagues on information rights and data protection matters.

Candidate Background

Strong experience managing Data Subject Access Requests (DSARs) and/or other information rights requests.

Practical knowledge of the UK GDPR and Data Protection Act 2018, with the ability to apply legislation to real-world scenarios.

Experience undertaking information searches, reviewing information, applying exemptions, redacting and preparing disclosures.

Experience working with sensitive and confidential personal information, ideally within a charity, healthcare, regulatory, public sector or similarly sensitive environment.

Strong written and verbal communication skills, with the ability to explain complex data protection matters clearly to different audiences.

Excellent attention to detail and the ability to manage competing requests and statutory deadlines.

Strong judgement and the ability to recognise risk, escalate appropriately and work with colleagues to reach practical solutions.

Experience working collaboratively with internal stakeholders and, ideally, external organisations such as statutory agencies, legal professionals or regulators.

A proactive and self-motivated approach, with the ability to work independently while contributing effectively to a wider team.

Experience of working with information relating to children, young people, families or safeguarding matters would be particularly relevant given the nature of the organisation and the sensitivity of the information handled.

Why Apply?

This is an opportunity to join a highly purpose-driven organisation where your expertise in information rights and data protection will have a direct impact on the safe and appropriate handling of sensitive information. The organisation offers a salary of £28,337 - £31,485 per annum, with an additional £3,366 London Weighting allowance where applicable, alongside 29 days annual leave and flexible remote/office working.

Morgan Hunt is a multi-award-winning recruitment business for interim, contract and temporary recruitment and acts as an Employment Agency in relation to permanent vacancies. Morgan Hunt is an equal opportunities employer. Job suitability is assessed on merit in accordance with the individual's skills, qualifications and abilities to perform the relevant duties required in a particular role.