An exciting opportunity has arisen in a West London Council.The aim of the role will be to:
-contribute to Information Management strategies and policies.
-Be responsible for the enforcement of the Council’s Information Management Strategy, for responding to requests from the public to meet the statutory requirements of Data Protection, Freedom of Information and Environmental Information Regulations 2005 legislation, regulations and code of practice and developing and maintaining a formal Information Security Policy for the Council.
-support the Council in pursuing compliance with good records management practices and to provide first-line-support for the corporate Electronic Document Management System (EDMS).
-support the Council in pursuing compliance with good information management practices including meeting legislative obligations and employing recognised codes for practice
-Full understanding of the principles of good information management and the ISO27001 Information Security standard and to provide advice, support, training and awareness to CMT, staff, Members and Partners to ensure compliance with legislation and adherence to standards and protocols. To assess the benefits of certification, report to the ITSOG and manage the process to compliance and, if it is agreed, to proceed with an application for certification and assist with the practical implementation across the council.
-use judgement and provide advice and guidance to members, senior management and other staff on high profile or controversial information management or compliance issues.
-develop and maintain an Information Security Policy for the Council, in consultation with key stakeholders across the council and partners.
-provide input to the corporate register of key services and processes for the Council, with security risks and controls defined.
-provide development, maintenance, consultation, promotion and publication of information management related corporate policies.
-To provide preparation and compilation of information security incident reports, resolution recommendations and risk analyses. To assist departmental colleagues who require advice on making additions, amendments or deletions to computer system access.
-provide development, procurement and delivery of information management related training courses, and the provision and maintenance of advice and guidance for all H&F employees.
-provide preparation and publication of information sharing advice and guidance. To maintain a log of all agreed and active information sharing protocols. Record and escalate all instances of breaches.
-provide preparation and timely publication of corporate information on both the intranet and H&F’s website. To work with the council’s communications team to ensure information is presented in accordance with the corporate image standards and the Plain English Campaign.
-provide development, maintenance, promotion and publication of the Information Management Team’s quality system procedures. To comply with the published quality system procedures at all times.
-co-ordinate the administration and conduct of the Council’s information management related departmental groups covering information management, information governance and information security.
-maintain records in the Information Governance EDMS system reflecting all requests for information, their status at all times, who has been tasked with processing each request and response target information. To liaise with departmental colleagues to ensure they have sufficient detail to process requests and are aware of target dates. To monitor responses.
-maintain, as necessary, the data required to produce corporate, departmental and business unit information management performance statistics including instances of non-compliance with H&F’s corporate policies and information management related legislative breaches. Publish performance information related to all aspects of information management including security incidents, all forms of compliance breaches, storage use, information requests.
-assist staff to manage the retention and disposal of the information in their systems, whether they are physical or electronic. To keep abreast of changes to retention and disposal guidance brought about by case law or good practice and update council policies in line.
-assist the Information Management Officer in discharging records management duties covering both physical and electronic documents, and as necessary during absences, process invoice and re-charge tasks in accordance with the quality management system procedures.
– provide advice and guidance to staff at all levels on the implementation of the Information Security Policy.
-contribute to the development and maintenance of the IT service’s QMS, taking account of any developments in the ISO9001: 2000 or TickIT standards.
-To organise the programme of internal Quality audits, and maintain a record of non-compliances and recommendations, ensuring that staff carry out the required actions.
-manage the external audit process, ensuring that assessments are carried out at the appropriate times, and that staff involved are adequately briefed before and afterwards.
-organise the process of issuing project evaluation forms, recording responses and complaints, and monitoring quality of service.
Contact: Marta Dimetros