Data Compliance Lead

We are seeking an experienced Data Compliance Lead to drive our organisation's compliance, governance, and data protection strategy. This role will play a key part in ensuring our business meets regulatory obligations, maintains strong security practices, and embeds compliance-by-design across all operations and product lines.

This is an excellent opportunity for someone who thrives in a fast-moving environment, enjoys autonomy, and wants to shape the future of data governance and compliance within a growing organisation.

• Serve as the organisation's Data Protection Officer (DPO) and act as the main point of contact for regulatory bodies such as the ICO.
• Lead compliance activities across key frameworks including GDPR, HIPAA, ISO
  27001, Cyber Essentials Plus, and emerging standards.
• Manage and evolve the organisation's Information Security Management System (ISMS), policies, and documentation.
• Oversee GRC tooling for evidence tracking, risk management, and continuous improvement.
• Conduct internal audits, support external audit processes, and manage corrective actions.
• Lead DPIAs, RoPA maintenance, PHI compliance processes, and data subject rights requests.
• Deliver staff training on GDPR, HIPAA, security, and privacy best practices.
• Support stakeholder groups with vendor risk assessments, procurement questionnaires, and customer compliance requests.
• Oversee international data transfer mechanisms and ensure compliance with global data protection requirements.
• Play a key role in incident response, breach assessment, and regulatory notification procedures.

You will excel in this role if you have:

• Strong working knowledge of GDPR and international data protection laws.
• Hands-on experience with ISO
  27001 implementation and maintenance.
• Understanding of cyber and security compliance frameworks.
• Excellent documentation, organisation, and communication skills.
• Confidence engaging with auditors, regulators, customers, and senior stakeholders.

• HIPAA and healthcare/health?tech compliance experience.
• SOC2 knowledge.
• Understanding of cloud security and SaaS environments.

• CIPP/E, CIPM, CIPT
• ISO
  27001 Lead Implementer / Lead Auditor
• HCISPP or relevant HIPAA training
• Security/GRC certifications (e.g., Security+, ISC², ISACA)

• Opportunity to shape compliance strategy at an organisational level.
• Work with a supportive, forward-thinking leadership team.
• Join a company investing heavily in security, privacy, and governance maturity.
• Competitive salary between £55,000-£70,000, plus benefits