Compliance Lead

DrDoctor

. Own the information governance and data protection framework, including internal controls, SOPs, GDPR advice, DPIAs, DPAs, ROPA and privacy policies .

Posted 10/14/2026full-timeLondon • United KingdomSenior💰 £65,000 - £102,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in information governance and data protection frameworks, including GDPR compliance, ISO certifications, and information security controls. Capable of advising senior stakeholders and managing compliance processes while collaborating across teams to support business objectives.

Highest-signal resume keywords

GDPR ComplianceISO 27001 CertificationInformation Security ControlsVulnerability ManagementData Protection Framework

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

DPIAsDPAsROPAVulnerability ScanningCompliance AuditsContract NegotiationData Subject RequestsInformation GovernanceClinical SafetyQuality Management Systems

Soft Skills

Stakeholder ManagementTraining DeliveryCollaborationAdvisory Skills

Tools & Technologies

DSP ToolkitCyber Essentials Plus

Certifications & Qualifications

ISO 9001ISO 14001ISO 27001ISO 13485

Industry Keywords

HealthtechHealthcareNHSMedical Device Regulation

About the role

Key responsibilities & impact

Own the information governance and data protection framework, including internal controls, SOPs, GDPR advice, DPIAs, DPAs, ROPA and privacy policies
Maintain effective information security controls, including vulnerability management, to protect data confidentiality, integrity and availability
Lead ISO 9001, ISO 14001 and ISO 27001 certifications and maintain compliance with the DSP Toolkit
Manage surveillance audits, records, continuous improvement and policy adherence
Work with the Clinical Safety Officer on ISO 13485 and Class 2 medical device certification
Run supplier and subprocessor due diligence
Manage information risk and lead security and information governance incident response, reporting and follow-through
Review and comment on commercial contracts for data, privacy and information governance compliance
Maintain framework agreement templates
Support client-facing teams with tenders, implementations and contract drafting
Deliver information security training
Advise the executive team on data and AI use in company strategy
Report risk and compliance metrics to relevant stakeholders
Keep compliance processes lean while protecting the business and supporting product and engineering teams
Collaborate with teams across the business, including engineers and the executive team

Requirements

What you’ll need

Strong, hands-on experience of GDPR and UK data protection, including DPIAs, DPAs, ROPA and data subject requests
Hands-on information security experience, including vulnerability scanning and remediation and maintaining effective security controls
Experience running compliance frameworks and audits, such as ISO 27001, ISO 9001, ISO 14001, the DSP Toolkit or Cyber Essentials Plus
Confidence advising and challenging senior stakeholders
Experience building a compliance culture through practical training
Experience owning or significantly contributing to an information governance framework, including governance of sensitive or special category data
Ability to interpret regulation and turn it into practical recommendations in a technology business
Contractual knowledge sufficient to negotiate data protection, privacy and security clauses in client and supplier agreements and run supplier due diligence
Exposure to clinical safety, medical device regulation or quality management systems such as ISO 13485 (nice to have)
Experience in healthtech, healthcare or the NHS, ideally working with patient data (nice to have)
Experience advising on AI and new uses of data (nice to have)
Interest in growing into wider commercial contracting alongside the CFO (nice to have)
Qualified lawyer status is not required
Right to Work in the UK

Benefits

Comp & perks

Relevant qualifications supported for the right person
Remote by default working approach
Flexible access to London office
Social budgets for team activities
Inclusive culture and reasonable adjustments during hiring and employment
Benefits and perks package referenced by the employer