Job Description
📋 Description Define, embed, and monitor Birdie’s compliance frameworks Lead NHS DSPT, DSCR compliance and NHS interoperability (GP Connect, PDS) Maintain risk registers and third-party risk assessments Lead incident response for data protection and compliance breaches Develop KRIs/KPIs for leadership and board reporting 🎯 Requirements Strong familiarity with NHS DSPT, DSCR, NHS API (GP Connect, PDS) UK GDPR and Data Protection Act 2018 knowledge for fast-moving SaaS Experience in risk assessments, control design, and risk registers Ability translating complex regulations into actionable engineering/product requirements Clear policy and executive communication skills Relevant certification (CIPP/E, CIPM, CISM, CISA, ISO 27001/SOC 2) is a plus 🎁 Benefits Compensation: salary £70K – £85K Generous stock options and equity Flexible hybrid work in London HQ, home workspace budget, in-person meetups 33 days holiday, birthday day off, company shutdown holidays Family-first policies, private health insurance, wellbeing perks Cycle to work, pension contributions, transparent culture
