Head of Information Assurance, Analysis Directorate, Ministry of Justice    

We have one role in the Corporate Service Team, within the Analysis Directorate. 

Please note: this opportunity is only open to individuals currently employed within the Civil Service

We welcome applications from candidates based across the UK. Candidates will have the option of being based in the Leeds or London HQ offices (with flexible working arrangements available) or your nearest Justice Collaboration Centre or Justice Satellite Office: see this map for more details.

Alternative locations may be available and will be discussed and agreed on the completion of background checks.

Interviews are likely to take place in mid-June to early July 2026 and will be held via MS Teams. We will keep a merit list for a year for those who successfully pass the interview board but who are not offered a post.

About the Analysis Directorate

We are passionate about improving justice outcomes through innovative research, data and analysis. In the Analysis Directorate, we provide high quality data and analysis helping to ensure strategic, policy, finance, corporate and operational decisions are based on robust evidence.

We create a culture in which people are empowered with the data and information to make excellent decisions; using cutting edge tools, techniques and collaboration; putting evidence at the heart of the justice system.

We are a multi-disciplinary team of around 650 staff that sits at the heart of the Ministry of Justice providing analytical support across a diverse and exciting agenda. We work in a dynamic and fast-paced context, and our skills are in heavy demand across the Ministry of Justice. Our collaborations beyond government are seen as ground-breaking. The Analysis community is made up of analysts and specialists including Social Researchers, Economists, Operational Researchers, Statisticians, Data Engineers, Data Scientists and other data specialists (such as data strategists, data dissemination, generalists and assurance experts).

Why work in the Analysis Directorate?

In the Analysis Directorate, we want all our people to feel valued for who they are and for the work they do. We provide a warm, inclusive place to work and offer a wide range of flexibilities and benefits as part of our people offer to reward our staff.

What we offer

• Flexible working arrangements and a focus on equality of opportunity - including welcoming part-time and/or job-share arrangements, compressed hours, working from home or your nearest Justice Collaboration Centres or Justice Satellite Office.

• Career development - regular development and promotion opportunities across a wide range of roles, career development support, with a generous individual learning and development budget.

• Range of new areas of work and new tools and techniques - we pride ourselves on our excellent deployment of well-established analytical methods, but also our progress to date. Progress such as our ambitious and innovative transformation programme to leverage departmental data and drive evidence-based decision-making using cutting-edge tools and techniques (for example: experimentation, personalisation, artificial intelligence).

• Analysis is at the centre of the Department’s decision making - our transformation programme is focused on maximising our impact on departmental outcomes. The Ministry of Justice’s Senior Team and our Ministerial Team want all decisions to be evidence driven - your analysis will be key in influencing decisions and real-world impact.

• Vibrant community - part of a multidisciplinary team that has a supportive culture and is looking to further develop the community with the help of everyone.

• See the frontline and what your work is influencing - regular opportunities to visit our front-line service providers, including courts, prisons, and probation to better understand the areas your analysis is affecting.

What you’ll do

The Head of Information Assurance supports the Analysis Directorate’s Senior Information Risk Owner (SIRO) and Information Asset Owners (IAOs) to ensure that good data protection and information assurance practices are followed, in accordance with the MoJ Data Protection Strategy, MoJ Information Wise Strategy and MoJ Cyber Security Strategy. You will monitor information security and data protection risks and compliance and assist the SIRO in making informed decisions regarding emerging trends in these areas. This will be done both locally and at various departmental committees and Board meetings. You will be a subject matter expert in Freedom of Information Act 2000 (FOIA) and lead a team of FOI Practitioners responding to statistical FOIA requests.  

You will be responsible for the day-to-day administration and management of information assurance in the Analysis Directorate. You will be the first point of   

contact for staff in relation to data protection, information management and information security questions. This includes providing support with the completion of Data Protection Impact Assessments (DPIAs) and Data Sharing Agreements (DSAs) and liaising with the Data Protection Team (DPT), the MoJ Information Security Team (MIST), the Information Services Division (ISD), Security Champions and Knowledge and Information Liaison Officers (KILOs), as necessary.    

You will lead the FOIA Team responding to a number of FOIA requests coming into the Directorate, acting as an escalation point for complex requests and reviews. You will work with the team to strive for continual service improvement and efficient ways of working with stakeholders. You will ensure management information is reported to the relevant committees on a regular basis.  

You will be pivotal in helping the Analysis Directorate to understand, prepare for and adopt changes to government and MoJ policies, guidance and technology. You will provide data protection advice to teams leading high profile analytical work and   

social research projects. You will advise on data protection risks associated with processing personal data for research purposes and work collaboratively with other justice sector stakeholders.  

You will improve staff knowledge and awareness of data protection; information management and security policies thought the provision of advice and training. You will support staff in reporting and assessing security incidents and personal data breaches.

You will track completion rates of the mandatory Security and Data Protection and Government Security Classification training.

Key duties and responsibilities

• Act as the main point of contact for the Analysis Directorate for the Data Protection Team, Information Security Team and the Information Services Division.  
  
  

• Act at the first point of contact for staff in the Analysis Directorate in relation to data protection, information security and information management queries.  
  
  

• Maintain Analysis Directorate Information Asset Registers.
  
  

• Meet with IAOs on a regular basis to assess and assign risks to Information Assets and ensure steps are taken to mitigate these risks locally, drawing on support from their wider business area and other support, where necessary.   
  
  

• Ensure adherence with MoJ’s retention schedules, ensuring paper records are managed in accordance with Record Retention and Disposition Schedules (RRDS).  
  
  

• Act as the point of contact for the Analysis Directorate in the event of a security incident or a personal data breach, determining the extent of risk, assisting the business area in identifying mitigations and driving recommendations forward.   
  
  

• Lead a small team of FOI practitioners responding to FOIA requests received by the Analysis Directorate.  
  
  

• Act as an escalation point for complex FOIA requests, as well as internal reviews, complaints and the Information Commissioner’s Office (ICO) investigations, working with the Information Services Division to completion.  
  
  

• Work with the FOI Team and Data Teams in improving the FOIA service and using management information to report on performance and risk where appropriate.
  
  

• Collaborate with Group Security on the completion of annual Departmental Security Health Check (DSHC) commissions, providing improvement plans and regular progress updates for their business areas.  
  
  

• Work collaboratively with Analysis teams on projects and programs to provide effective and timely data protection and information security risk advice. 
  
  

• Advise on data protection and information security risks associated with the provision of social research services. 
  
  

• Engage with Information Services Division and Justice Digital to ensure information risks arising from information-related projects (e.g. Digital Records Roadmap) are identified and controlled.  
  
  

• Act as the first point of contact for staff who are required to complete a DSA, Memorandum of Understanding, data processing agreement or similar agreement. Data Protection Impact Assessments (DPIAs), Privacy Notices, Subject Access Requests and any other data protection compliance activity.  

• Collaborate with KILOs in their business areas to ensure information requests are handled in compliance with applicable legislation and facilitate clearance for freedom of information request responses.  

• Ensure that all staff have completed the annual Security and Data Protection Training and the Government Security Classification Policy training, where necessary, providing additional targeted information security, information management, FOIA and data protection training.  

• Ensure own knowledge of data protection and information management and security is maintained.  

• Attend relevant committees and boards in relation to information security and data protection risks.

• Participate in data protection and information security and management projects and awareness-raising campaigns. This includes supporting implementation of deliverables and helping to disseminate training and communications materials locally and arranging briefings/stand-ups/team meetings to raise awareness.   

The following experience and skills will be required:

• A good working knowledge and understanding of both the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as well as significant work experience of identifying, and advising on data protection risk

• A proven track record in developing and leading data protection or information  

assurance strategy in government or public sector, including stakeholder engagement, specifically in relation to risk.  

• Experience of working in a data or research function or in a data driven   

environment.  

• Experience of leading or managing a team.

• An adaptable individual who can adapt to changing priorities and maintain focus and alignment of your activities and service offering.  

• Experience of engaging with stakeholders and staff to resolve business issues and ensure effective and efficient delivery of services.  

• Be an excellent communicator with experience of providing written and verbal   

advice, including senior management and stakeholders.  

• The ability to explain data protection and information assurance concepts to   

staff and stakeholders.  

• Experience of responding to or managing a team responding to Freedom of   

Information Act (FOIA) Requests.

• A proven track record in developing and leading data protection or information  

assurance strategy in government or public sector, including stakeholder engagement, specifically in relation to risk.  

The following experience and skills are desirable:

• An industry recognised data protection/information security qualification e.g. CIPP/E, CIPM, CISMP, BCS

• An industry recognised Freedom of Information qualification e.g. BCS

How to apply

You’ll need to submit an anonymised work history and Statement of Suitability as part of your application. You will not be considered if you do not provide both.

Your work history should meet the following criteria: well structured, succinct, and written in clear language.

Your Statement of Suitability should be no more than 750 words and should give us examples of how your skills and experience match those needed for this role. Consider giving examples that cover all the requirements in the ‘What you’ll do’ section and use work you have completed to demonstrate how you meet each one. 

Selection Process

There will be an initial sift of applicants through comparing submitted evidence against the ‘What you’ll do’ bullets. This usually takes two weeks, depending on the number of applications.

Those who make it through the initial sift will be invited to a Civil Service Success Profile interview. In the Civil Service we use Success Profiles to help us find the right person for the job. We will be using a mixture of methods to assess your abilities, strengths, experience, technical skills, and behaviours. We highly recommend learning about Success Profiles and using the Situation, Task, Action, Result and Reflection (STARR) framework when structuring your answers.

The highest scoring candidates that pass the interview will be offered the roles. The entire process can take up to a month.

Interview Process

Behaviours

You will be assessed against the Civil service success profiles framework at interview stage:

• Communicating and Influencing

• Managing a Quality Service

• Delivering at Pace

• Leadership

Please also refer to the CS Behaviours framework for more details at this grade.

https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/717275/CS_Behaviours_2018.pdf 

Further Information 

If you require any additional information about the role, please contact: Rita Kumi-Ampofo Rita.Kumi.Ampofo@justice.gov.uk or Analysispeopleoperations@justice.gov.uk