The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Junior Information Compliance Analyst
1-2 yearsSkills to master
- Mastering DSAR processing, conducting basic audits, understanding core data privacy principles, and meticulous documentation. You're learning the 'what' and 'how' of daily compliance tasks.
You're ready to move on when
- Consistently completes DSARs accurately and on time without supervision.
- Identifies and documents minor compliance issues effectively during routine audits.
- Can clearly explain basic data privacy concepts to non-technical colleagues.
- Proactively seeks to understand the 'why' behind compliance policies.
- 2
Knowledge Management Coordinator (with Compliance Focus)
2-3 yearsSkills to master
- Deep understanding of KM platforms (Confluence, SharePoint), content lifecycle management, basic taxonomy application, and an emerging awareness of compliance requirements for content. You're learning about the 'what' of our information assets.
You're ready to move on when
- Manages content lifecycles efficiently, ensuring content is up-to-date or archived.
- Successfully applies content classification and tagging schemes.
- Identifies potential compliance issues related to content (e.g., outdated PII).
- Shows a keen interest in data privacy and governance principles.
- 3
IT Support Analyst (with Data Governance Exposure)
2-4 yearsSkills to master
- Strong technical troubleshooting, understanding of access controls, basic network security, and exposure to data storage and backup policies. You're learning about the 'how' of data security from a technical angle.
You're ready to move on when
- Effectively manages user access requests and permissions.
- Troubleshoots data access issues, understanding underlying security configurations.
- Demonstrates an understanding of data retention for backups and archives.
- Expresses a desire to move into a more dedicated data governance or compliance role.