Information Rights Manager

Ref Number

B27-00136

Professional Expertise

Legal, Governance and Secretariat

Department

Office of General Counsel (B27)

Location

London

Working Pattern

Full time

Salary

£56,431-£66,437

Contract Type

Permanent

Working Type

Hybrid

Available for Secondment

No

Closing Date

07-Nov-2026

About us

The Data Protection and Information Rights team sits within UCL’s Office of General Counsel and is responsible for providing advice on a wide range of data protection and information rights information matters relating to the University.

The Data Protection and Information Rights Team is headed by Alexandra Potts, the Director, Data Protection and Information Rights. Alexandra reports to the General Counsel, Natasha Lewis, who reports to the Provost, Dr Michael Spence.

The Information Rights Manager is a business and technology focused role which requires ambition and focus to help drive through the transformation required by an evolving institution against a background of increasing regulatory focus, transparency, competition, globalisation and a rapidly evolving threat horizon, especially in the information security space.

The Information Rights Manager will be a lead member of the University’s Data Protection and Information Rights team within Office of General Counsel. The post holder will play a key role in managing UCL’s day to day compliance with the UK GDPR, the Freedom of Information Act 2000 (FOIA), and the Environmental Information Regulations (EIRs). The Information Rights Manager will provide advice on all matters relating to data protection and freedom of information compliance to staff at all levels and will assist in providing training and guidance across UCL. The Information Rights Manager will report to the Head of Information Rights.

About the role

Working within a team of data protection and freedom of information professionals, the Information Rights Manager is responsible for supporting and helping to advise the University’s Faculties,Schools, Institutes and Professional Service (PS) functions by providing expert, pragmatic, and targeted data protection and freedom of information support, guidance and training, across the University, in accordance with the relevant legislation, University policies, standard operating procedures and technical security standards.

Drawing upon prior experience in delivering data protection initiatives he/she will take data protection, freedom of information and records management action items and work with academic and professional services stakeholders to ensure that these items are effectively delivered.

Providing knowledgeable support on key data protection, freedom of information and records management processes, the Information Rights Manager will, under the direction of the Head of Information Rights, ensure that the attitudes and objectives of the baseline plan are translated into lasting and beneficial changes to the academic and business operation of the University.

Duties and responsibilities

The Information Rights Manager’s duties will include:

• Proactively support and evidence University data protection compliance within the University by working with academic and relevant Professional Services staff.
• Day-to-day responsibility for the provision of responses to subject access requests made to UCL including determining where exemptions should be applied to withhold information.
• The management of a dedicated support team for data protection and freedom of information.
• Day-to-day responsibility for the provision of responses to Freedom of Information/Environmental Information Regulations requests made to UCL including determining where exemptions should be applied to withhold information and considering the public interest test.
• Managing requests from regulatory bodies and law enforcement agencies, exercising judgement and escalating concerns as appropriate.
• Providing expert, targeted information security and data protection support, guidance and training across the University.
• Providing ongoing support as appropriate to relevant leadership and project managers as well as the Information Security Group to ensure that new projects are appropriately risk assessed.
• Providing leadership, direction and guidance in assessing and evaluating data protection risks and monitor compliance with security standards and appropriate policies. Understand how changing risk horizons may affect the University and provide exp…