Risk & Compliance Manager
Core
Define, embed, and monitor compliance frameworks for data protection, information security, and health system governance within a home healthcare SaaS platform.
Role type
Senior IC Risk & Compliance Manager (Healthcare/UK NHS)
Builds
Compliance programs for NHS integrations (GP Connect, PDS, DSCR) and data protection controls
Domain
UK Healthcare / Health Data / NHS Interoperability
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
UK GDPR, NHS DSPT, DSCR, NHS API assurance frameworks, risk register management, third-party risk assessment, incident response, KRI/KPI development
Preferred skills
CIPP/E, CIPM, CISM, CISA, ISO 27001, Cyber Essentials, SOC 2
Technologies
NHS DSPT, DSCR, GP Connect, PDS, UK GDPR, Data Protection Act 2018
Responsibilities
Own data protection compliance across product and operations; Lead annual NHS DSPT submission; Assure NHS interoperability connections (GP Connect, PDS); Maintain risk register and control frameworks; Lead incident response for data protection breaches; Build KRIs/KPIs for leadership and the board
Seniority
Senior, hands-on IC