Company: Careers at MI5, MI6 and GCHQ
Location: Cheltenham
Posted: May 1st, 2026
Salary - £37,892, including a concessionary payment of £2,758
As you’ll be working with highly sensitive information, home working is not possible in this role. However, we recognise the importance of a healthy work-life balance, which is why we offer flexible working options, including flexitime, part-time (a minimum of 30 hours per week) full-time, and compressed hours. Travel to London will also be required on an ad hoc basis, this may range from once a month to once every three months.
As an Information Governance & Data Protection Caseworker, you’ll help ensure GCHQ’s handling of personal data is secure, lawful, and compliant with legislation. Working as part of a small, supportive team, your work involves completing data protection casework, responding to internal and external enquiries, carrying out sensitivity reviews, and developing compliance arrangements. In short, this role helps provide a trusted framework for the management and protection of GCHQ’s most sensitive information, supporting public trust and enabling GCHQ to operate effectively and responsibly.
Day to day, you’ll handle data protection enquires from colleagues throughout the organisation, advising on questions and concerns as they arise. Your work includes managing a caseload of data and information requests, reviewing sensitive material to determine what must be redacted, and keeping colleagues informed throughout the process. Some of the information analysed may relate to historical missions and intelligence matters. In these cases, you’ll help determine what can be released, with support from senior members of the team.
You’ll also investigate and provide responses to data breaches, and support teams across GCHQ to manage their data effectively through training and guidance. You’ll receive training on the legal exemptions used to protect sensitive, mission‑critical information, enabling you to support responses to Freedom of Information Act (FOIA) requests from Whitehall when required. To support close collaboration with stakeholders and the delivery of training to colleagues across GCHQ, the role requires occasional travel to London.
To apply, you’ll need to hold a minimum of a Level 3 qualification, such as an A-level or equivalent in Humanities, Social Sciences, STEM subjects or other disciplines where theoretical knowledge, critical thinking, and academic writing have been demonstrated. Applicants with a degree or another higher qualification are also encouraged to apply. Relevant experience working with GDPR and data protection, as well as the Freedom of Information Act (FOIA), or in information management or regulatory compliance, is required. You should be familiar with subject access requests, data breach management, and information disclosure processes. A proven ability to assess, redact, and protect highly sensitive material, as well as to advise others on effective and lawful management of personal data, is also expected.
As you’ll be reviewing, analysing, and making decisions about sensitive information, sound judgement, discretion, and integrity are essential. Attention to detail is key, particularly when assessing risk and making balanced decisions.
The role involves explaining complex data protection and information access requirements to a range of stakeholders, making effective communication skills essential. You’ll need an ability to work to deadlines, manage challenging enquiries and oversee a personal caseload of competing priorities.
Finally, you’ll have a genuine interest in data protection, information rights, or public service, together with curiosity about how an organisation such as ours protects sensitive information while meeting legal responsibilities. Openness to learning and development is important, as training will be provided on internal processes. We’re also interested in people who are eager to develop their understanding of national security within a public sector environment.
The role offers structured on‑the‑job training, particularly during the initial period, with opportunities to shadow experienced colleagues and gradually take responsibility for casework. This includes learning through practical experience, supported by regular guidance, feedback, and mentoring within the team from your assigned buddy.
You’ll also have access to departmental training courses, including data protection, security, and organisational processes. There may be opportunities to attend external courses or workshops, where appropriate, to build specialist expertise and support professional development over time.
You’ll receive a starting salary of £37,892, comprising a basic salary of £35,134 plus a concessionary payment of £2,758, along with other benefits including:
To work at GCHQ, you must be a British citizen, or hold dual British nationality.
This role requires the highest level of security clearance, known as Developed Vetting (DV).
This role is based in Cheltenham, so you’ll need to live within a commutable distance.
Please be aware that we reserve the right to bring forward the closing date for this role from the original closing date once a certain number of applications have been received. We advise you to submit your application at your earliest convenience to avoid disappointment.
#J-18808-Ljbffr