Compliance and Information Governance Lead

About the role

We are looking for a pragmatic, hands‑on Compliance and Information Governance Lead to own our data protection, information security and compliance frameworks. You will advise senior stakeholders, shape policy and ensure our systems and processes meet regulatory requirements.

Key responsibilities

• Own the information governance and data protection framework, including GDPR advice, DPIAs, DPAs, ROPA and privacy policies.
• Maintain information security controls, manage vulnerability scanning and remediation.
• Lead ISO 9001, ISO 14001, ISO 27001 certifications and DSP Toolkit compliance.
• Work with Clinical Safety Officer to achieve ISO 13485 and Class 2 medical device certification.
• Run supplier and sub‑processor due diligence and lead incident response.
• Review commercial contracts for data, privacy and IG compliance.
• Deliver training and pragmatic advice on data and AI usage.

Required profile

• Strong hands‑on experience with GDPR and UK data protection, including DPIAs, DPAs and ROPA.
• Proven ability to advise and challenge senior stakeholders and build a compliance culture.
• Experience running compliance frameworks and audits such as ISO 27001, ISO 9001, ISO 14001 or DSP Toolkit.
• Comfortable navigating ambiguity, collaborating across all levels and teams.

Required skills

• GDPR, DPIA, DPA, ROPA implementation.
• Information security vulnerability management.
• ISO 27001, ISO 9001, ISO 14001, ISO 13485 compliance.
• Supplier due diligence and contract review for data protection clauses.