Information Rights Manager

In this role you support UCL’s data protection and freedom of information efforts, guiding faculties, schools, and professional services to meet GDPR, FOIA, and EIR requirements. You lead a dedicated information rights team and collaborate with stakeholders to implement compliant, risk-aware processes. You translate the baseline plan into practical improvements across academic and business operations. This position offers meaningful impact by strengthening information governance and security posture within a transforming university.

• 41 Days holiday (27 days annual leave, 8 bank holidays, 6 closure days)
• Annual leave purchase scheme (5 days)
• CARE pension scheme
• Cycle to work scheme
• On-site nursery
• On-site gym

• Provide day-to-day responses to subject access requests and FOI/EIR inquiries with appropriate exemptions and public-interest considerations
• Lead and manage a dedicated data protection and freedom of information support team
• Advise leadership and project managers on information rights, risk assessments, and contract data protections
• Ensure data protection provisions are incorporated in contracts and information governance documents
• Monitor regulatory changes and provide regular progress reporting and metrics to Head of Information Rights
• Deliver guidance, training, and resources on data protection, FOI, and records management across the university
• Build relationships with internal stakeholders to drive compliance initiatives and continuous improvement

• Degree level education or equivalent
• Relevant information rights management qualification or significant experience
• Proven track record handling FOIA/DPA/EIR requests in a similar role
• Excellent analytical and judgement skills
• Experience collaborating with internal stakeholders and producing guidance/tools for staff and public
• Proficiency in Freedom of Information Act 2000, GDPR, Environmental Information Regulations and related regulatory environment
• Strong organizational skills and ability to meet deadlines

• Excellent written and oral communication
• Ability to work independently and react quickly to emerging issues
• Stakeholder relationship management
• Knowledge of GDPR, FOIA, EIRs and related regulatory environment
• Information governance and records management expertise
• Contract review and data sharing/processing agreements basics