The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Information Governance Officer (L2)
2-3 years at L2Skills to master
- Independently managing DSARs, maintaining the IAR, delivering basic governance training, and consistently applying existing policies.
You're ready to move on when
- You're consistently delivering high-quality work without much supervision.
- You're proactively identifying areas for process improvement.
- You're starting to mentor new joiners informally.
- You've expressed interest in leading larger projects.
- 2
Compliance Analyst / Legal Assistant (with Data Focus)
3-5 years in a related roleSkills to master
- A deep understanding of regulatory requirements, experience with legal hold processes, strong analytical skills, and an ability to translate legal text into practical guidance.
You're ready to move on when
- You've been involved in data-related compliance projects.
- You're comfortable interpreting complex legal documents.
- You're keen to move from advisory to implementation.
- You've completed relevant certifications like CIPP/E.
- 3
Records Management Specialist
4-6 years in RMSkills to master
- Expertise in retention scheduling, defensible disposition, physical and electronic records management systems, and understanding of ISO 15489.
You're ready to move on when
- You've managed complex records programmes.
- You understand the full information lifecycle.
- You're eager to expand into broader data privacy and governance domains.
- You've worked with modern electronic records systems.