Information Governance Officer

Student Loans Company•Darlington, SC

2d•£61,950 - £72,952•Hybrid

About The Position

Student Loans Company is a non-profit making Government-owned organisation to provide loans and grants to students in universities and colleges in the UK. Since 1989, we have enabled our customers to invest in their futures by delivering secure, accurate and efficient assessment, payment and repayment services. Our Values Culture is at the heart of everything we do at SLC and we are guided by our five values which help make SLC a great place to work: Honesty: We act with integrity and transparency, sharing information openly and addressing challenges with courage. Empowerment: We enable people to take initiative, make impactful decisions, and continuously learn and grow. Accountability: We deliver on commitments, own our successes and mistakes, and strive for quality outcomes. Respect: We value diverse perspectives, actively listen, and create an inclusive environment where everyone belongs. Trust: We collaborate across teams, build dependable relationships, and work as one to deliver for our customers. These values are more than words—they guide our decisions, shape our collaborations, and strengthen our impact on the students we serve. About the Role We’re looking for a Senior Manager to lead our Data Protection Office function within Assurance Services, providing leadership in Information/Data Governance and Data Protection Compliance, and ensuring adherence to Legal, Regulatory and Internal Policy requirements across the organisation This is a highly visible role, working closely with stakeholders across Operations, Technology and Security, Corporate Services, People, Risk and Internal Audit, to apply subject matter expertise, influence decision-making, highlight risks and drive effective Governance outcomes. You’ll motivate and develop a team of Data Protection professionals, including setting objectives, conducting regular 1:1s, performance reviews and coaching to build capability, resilience and drive high performance. Please note that SLC operate a hybrid working environment, with a minimum of 2 days in the office. This role has a mandatory requirement for Wednesday to be one of your in office days.

Requirements

Experience of managing/leading a high performing team
Strong Data Protection knowledge, including experience of Audit activity, Risk Management and Information/Data Governance frameworks, with the ability to oversee their consistent application across business areas
Effective communication and stakeholder management skills, with confidence to influence at a senior management level and represent the Data Protection Office in key meetings/forums
Ability to identify and communicate process improvements, policy development and supporting documentation/processes
Works independently within their remit, trusting own judgment and with confidence in challenging situations
Ability to interpret complex Regulatory, policy and control requirements, translating these into clear direction and guidance for delivery across business areas
Skilled in Risk identification, assessment and prioritisation, acting as a senior escalation point and ensuring appropriate mitigation/risk acceptance actions are in place
Strong analytical and critical thinking capability, able to navigate ambiguity and assess impacts across interconnected processes, Risks and Controls
Strong attention to detail and professional judgement, enabling effective oversight of multiple priorities and informed decision-making through others
Experience of people management in a relevant subject matter Governance/Compliance role, in ensuring adherence to Regulatory requirements/standards
Experience of being a confident communicator
Experience in developing and implementing relevant subject matter policies and procedures
Experience in applying risk management principles
Experience of data breach investigation case work and being a SME in incident response
Experience of working across organisational boundaries in a fast-paced environment, providing leadership and authoritative professional opinion in a timely manner
Right to work in the UK

Nice To Haves

Recognised Data Protection qualification eg. CIPP-E or Certified GDPR Foundation and Practitioner

Responsibilities

Providing leadership in Information/Data Governance and Data Protection Compliance
Ensuring adherence to Legal, Regulatory and Internal Policy requirements across the organisation
Applying subject matter expertise, influence decision-making, highlight risks and drive effective Governance outcomes
Motivating and developing a team of Data Protection professionals, including setting objectives, conducting regular 1:1s, performance reviews and coaching to build capability, resilience and drive high performance
Identifying and communicating process improvements, policy development and supporting documentation/processes
Acting as a senior escalation point for risk identification, assessment and prioritisation, ensuring appropriate mitigation/risk acceptance actions are in place
Overseeing multiple priorities and informed decision-making through others
Applying risk management principles
Conducting data breach investigation case work and acting as a SME in incident response
Providing leadership and authoritative professional opinion in a timely manner

Benefits

Civil Service Pension with an employer contribution of 28.97%
28 days annual leave plus 8 public holidays
Option to buy/sell annual leave
Flexi-time and enhanced flexible working options
Life insurance cover for 4 x annual salary
Enhanced company sick pay and family leave including maternity, paternity and adoption
Contributory lifestyle benefit options including discounts at hundreds of retailers
Cycle to work scheme
Access to the Civil Service Sports and Leisure Club for discounted gym memberships
Optional dental insurance scheme