Information and Data Governance Manager

Join our team at Keolis Amey Metrolink (KAM), the largest light rail network in the UK!

Come and join our Health, Safety, Quality and Environment (HSQE) team, we are recruiting for a Data and Information Governance Manager.

The Data and Information Governance Manager plays a crucial role in ensuring compliance with relevant legislation and our client’s contractual obligations related to information governance. This includes the UK General Data Protection Regulation (GDPR) and Data Protection Act 2018 and other guidelines published by and the Information Commissioner’s Office acting as the Data Protection Officer (DPO) for KeolisAmey Metrolink (KAM).

The role also supports the implementation of KAM's Information Security, Cyber and quality frameworks through collaboration with stakeholders to develop and implement information governance policies, procedures, and action plans.

So, if you would love to join the team within Manchester’s iconic Metrolink, what are you waiting for, we can’t wait to hear from you!

Key accountabilities will include:

• Contribute to the delivery of a high performing team through ensuring objectives, standards and key performance indicators are met.
• Contribute to building an inclusive culture, taking a zero-tolerance approach to unwanted behaviours and attitudes that go against an inclusive culture, escalating matters to management when appropriate.
• Contributes to outcomes that promotes a customer centric approach to ways of working.
• Ensure own health, safety and wellbeing in the workplace, ensuring the zero harm principles and just culture is demonstrated in all ways of working. 
• Ensure compliance with relevant policies, regulations, and standards.
• Devise, implement, and review data protection/GDPR principles/Information policies, process and procedure, supporting our client as their Data Processor.
• PCI compliance management to support our client’s PCI responsibility as well as KAM’s own PCI responsibilities as a merchant.
• Act as KAM’s Data Protection Officer (DPO)
• Provide specialist advice on Privacy Notices, Data Protection Impact Assessments, and Data Sharing Agreements.
• Ensure compliance with lawful bases for the use of personal data and maintain a complete and accurate register of data assets for the business.
• Advocate for improved data risk management practices within the organization.
• Managing data protection Subject Access Requests (SAR)
• Recording and Investigating data and Information related Incidents.
• Undertaking Internal audits of KAM's information security and quality frameworks, systems, policies, processes and procedures.
• Maintain effective relationships with decision-makers and influencers.
• Stay informed about information security developments and best practices.

What you’ll bring:

• Relevant degree or equivalent experience in Data Protection, Records Management, or related field.
• Knowledge of ISO 27001 and 9001 frameworks would be desirable
• Knowledge of recognised cyber security frameworks, data protection regulations, and information governance principles.
• Strong understanding of confidentiality, privacy, and security requirements.
• Experience of handling Subject Access Requests (SAR)
• Experience in holding the responsibility of Data Protection Officer (DPO)
• Excellent communication and interpersonal skills.
• Analytical skills to interpret detailed information and regulations.
• Strong organisational and time management skills.
• Ability to work independently and as part of a team.

Our Commitment to you:

At KAM, we celebrate the diversity of our customers, communities, and colleagues, and strive for a workforce which is equitable, inclusive and representative of the communities we serve, and we strongly encourage applicants of all genders, ages, ethnicities, cultures, abilities, and sexual orientation to apply. We look forward to receiving your application.

We live our values of “We Care, We Commit, We Imagine” through our behaviours and we strongly believe that diverse perspectives drive innovation and create an environment where individuals can imagine that anything is possible. We care about our people, and we fully commit to creating an inclusive environment where our people feel valued, respected and empowered to thrive.

To ensure you are given the best opportunity to succeed in the recruitment process, please let us know if you will require any support or reasonable adjustments.  You can contact our team here .

What we will offer you:

• Salary: £50,000
• 37.5 hours per week
• Free Tram Travelfor all our colleagues, plus a sponsored pass for an immediate family member
• 25 days holiday, plus bank holidays
• Access to Amazing Discountsat major retailers including Asda, Curry’s PC World, John Lewis and many more.
• Family Friendly Policiesincluding enhanced maternity and paternity pay.
• Wellbeing Supportincluding a free counselling, health checks and Employee Assistance Programme.
• Supporting your developmentfocusing on career pathways and professional fees covered if required for role.

The closing date for applications:15 July 2025

What we will need to check:

If you are successful, we will need to complete several pre-employment checks prior to you starting. These include.

• Proof of address.
• Evidence of right to work in the UK.
• References from previous employment or studies from the last 3 years
• Pre-employment medical (level subject to role).
• Criminal Records self-declaration check, in line with the Rehabilitation of Offenders Act (1974).

Depending on the level of applications for this role we may close the advert earlier, therefore we encourage you to submit your application early.