The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Senior Information Governance Officer (L3)
3-5 yearsSkills to master
- Leading end-to-end governance projects, drafting policies, mentoring junior staff, and making technical decisions within project scope. You'd be ready for this role once you're consistently delivering complex projects independently.
You're ready to move on when
- Successfully led 3+ significant governance projects (e.g., new retention schedule deployment, major eDiscovery case).
- Consistently sought out by junior colleagues for guidance and problem-solving.
- Demonstrated ability to influence cross-functional peers on governance matters.
- Can articulate the 'why' behind governance policies, not just the 'what'.
- 2
Data Privacy Lead
4-6 yearsSkills to master
- Deep expertise in data protection regulations (GDPR, CCPA), managing DSARs, conducting DPIAs, and advising on privacy-by-design principles. The transition involves broadening your scope to include more general information governance.
You're ready to move on when
- Managed the full lifecycle of data privacy compliance for a significant business area.
- Successfully advised on privacy implications for new product features or data initiatives.
- Holds CIPP/E or similar advanced privacy certification.
- Demonstrated ability to translate privacy requirements into actionable technical and process controls.
- 3
Legal Operations Manager (with IG focus)
5-8 yearsSkills to master
- Managing legal technology, eDiscovery processes, contract lifecycle management, and streamlining legal workflows. The move to Lead IG Strategist would involve a deeper dive into proactive governance design and risk management beyond just legal matters.
You're ready to move on when
- Managed eDiscovery processes for multiple legal matters, including vendor management.
- Implemented legal tech solutions that improved efficiency or compliance.
- Strong understanding of legal hold requirements and defensible preservation.
- Demonstrated ability to bridge the gap between legal requirements and technical implementation.