UCAS is at the heart of connecting people to higher education.

UCAS is the world’s leading shared admissions service for higher education. We provide application services for UK universities and colleges as well as delivering a wide range of research, consultancy and advisory services to schools, colleges, careers services, professional bodies and employers.

We’re a successful and fast-growing organisation, which helps hundreds of thousands of people every year. We're committed to delivering a first-class service to all of our customers — they're at the heart of everything we do.

Finance and Corporate Services

Our Finance and Corporate Services business unit is a fusion of multiple functions including legal and compliance, along with— financial planning and accounting, facilities and building management, procurement, corporate governance, information governance, and business support.

Legal and Governance teams

We are made up of four small teams – Legal, Information Governance, Corporate Governance and Business Support. Working closely together across a diverse range of legal matters we support all parts of the business to identify legal and compliance risks and ways of managing/mitigating these so we can act as an enabler of business growth and ambition. We offer our advice and support in a way which is technically sound but at the same time in ‘plain English’ and which is pragmatic.

The Information Governance Manager leads the Information Governance Team, to ensure compliance with data protection and associated privacy legislation, most notably the General Data Protection Regulation (GDPR) and Data Protection Act.

The role holder is responsible for UCAS' information security management system, maintaining UCAS' ISO 27001:2013 accreditation, and offering clear and pragmatic advice on information security and governance risk.

 The post has several key areas of focus

• Strategy and policy development 
• Legal and Regulatory compliance
• Assurance, auditing and monitoring
• Advisory
• Organisation development, training and management

To find out more about key duties and responsibilities please see the role profile attached 

• Proven experience of information governance, with a clear view on how to present information and make recommendations.
• Track record of successfully developing and implementing information security and risk governance plans.
• Excellent legislative, policy, and practical information governance knowledge, and familiarity with all aspects of relevant data protection law and policy/guidance.
• Degree or equivalent level qualification.
• Superior influencing and communication skills.
• Ability to work with and influence a broad range of stakeholders, at all levels.
• A passion for delivering tangible and measurable results.
• A collaborative approach, with the ability to maximise the short-term position, while building long-term productive relationships.
• Ability to plan and manage multiple work programmes effectively.
• The appropriate level of discretion and trust as required to work with sensitive and confidential information.
• Experience of engaging and educating different functional areas on information security compliance requirements.
• Experience of managing a team.
• Demonstratable capability to plan over short, medium, and long-term timeframes, and adjust plans and resource requirements accordingly.
• Ambition and drive to succeed, with energy and enthusiasm.

Salary - up to £48,000

• 30(!)days annual leave (plus 3 concessionary days over Christmas and your bank holidays!)
• Flexibility – UCAS positively supports Hybrid working for its employees, meaning you can work between home and the office in a way that suits you and the business and also has a comprehensive Flexible Working Policy
• A generous pension scheme
• Hundreds of high street discounts and offers with Perkbox
• Internal training and development
• Subsidised gym and café
• Be rewarded for going above and beyond with our ex-gratia bonus scheme and Celebrating U, our quarterly employee recognition scheme