The Information Governance Specialist supports the execution and continuous improvement of information governance and compliance frameworks. This role translates regulatory and policy requirements into operational controls, assessments, and governance activities across the organisation, operating with a high degree of independence but under senior oversight. The role is responsible for ensuring that the appropriate policies, procedures, standards and practices for conformance with the respective governance frameworks and mandatory legislation and regulations, are in place as defined.
Key Responsibilities
Develop and maintain appropriate policies, procedures and practices in relation to IT, Privacy and Security governance.
Lead, implement and consistently maintain governance and compliance frameworks, standards and controls.
Facilitate training and communication regarding Information Governance (including Privacy)
Provide support and guidance with governance planning, execution, reporting and assurance activities to technology and privacy teams; projects and business stakeholders.
In conjunction with Group Legal and Group Compliance, assist in the identification of applicable laws and regulations as well as the implementation of controls and actions to ensure compliance
Recognise and identify potential gaps, risks and non-compliance issues where existing policies, standards and procedures may require improvement; facilitate and track remediation.
Execute quality assessments and prepare governance and compliance reports and dashboards for management; including the tracking of metrics.
Skills
Policy Development
Security Governance
Security Compliance
Reporting
Problem solving
Communication
Stakeholder Engagement
Qualifications
IT, Privacy or Legal related Diploma / Degree
IT qualifications (A+, N+ or equivalent) and proven experience
Certifications
Work Experience
6+ Years solid experience in information governance, compliance, risk or IT assurance
Exhibit detailed knowledge and experience in governance, compliance, risk and auditing frameworks and apply that in reviewing the quality of existing and new documentation.
Ability to engage independently with stakeholders and delivery teams.
Working knowledge of applicable industry standards, legislations, etc.