The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Associate Information Governance Analyst (L1)
1-2 yearsSkills to master
- Mastering basic data classification, accurate DSAR data gathering, understanding core retention principles, and meticulous documentation. It's about executing tasks reliably.
You're ready to move on when
- Consistently delivering assigned tasks on time and with minimal errors.
- Proactively asking clarifying questions and demonstrating a desire to learn more about governance.
- Successfully completing all mandatory internal governance training modules.
- Showing initiative in identifying minor process improvements.
- 2
Legal Support / Paralegal (with data focus)
2-3 yearsSkills to master
- Understanding legal hold processes, document review for eDiscovery, and the basics of data protection law. You'd bring a strong legal lens to the role.
You're ready to move on when
- Experience with legal document management systems and eDiscovery platforms.
- A solid grasp of legal terminology and the ability to interpret legal requirements into practical actions.
- Demonstrated interest in data privacy and information management beyond traditional legal support.
- 3
IT Support / Junior Security Analyst (with compliance focus)
2-4 yearsSkills to master
- Familiarity with access controls, data security principles, and how information flows through IT systems. You'd bring a technical understanding of data protection.
You're ready to move on when
- Experience with user access management and basic security incident response.
- A good understanding of network drives, cloud storage (e.g., SharePoint), and their permission structures.
- A desire to move from purely technical security to the policy and process side of information handling.