DrDoctor

Compliance

• Own the information governance and data protection framework, including internal controls, SOPs, GDPR advice, DPIAs, DPAs, ROPA and privacy policies
• Maintain effective information security controls, including vulnerability management, to protect data confidentiality, integrity and availability
• Lead ISO 9001, ISO 14001 and ISO 27001 certifications and maintain compliance with the DSP Toolkit
• Manage surveillance audits, records, continuous improvement and policy adherence
• Work with the Clinical Safety Officer on ISO 13485 and Class 2 medical device certification
• Run supplier and subprocessor due diligence
• Manage information risk and lead security and information governance incident response, reporting and follow-through
• Review and comment on commercial contracts for data, privacy and information governance compliance
• Maintain framework agreement templates
• Support client-facing teams with tenders, implementations and contract drafting
• Deliver information security training
• Advise the executive team on data and AI use in company strategy
• Report risk and compliance metrics to relevant stakeholders
• Keep compliance processes lean while protecting the business and supporting product and engineering teams
• Collaborate with teams across the business, including engineers and the executive team

Explore Compliance Lead at DrDoctor. Review requirements and application details.