Risk & Compliance Manager

📋 Description

• Define, embed, and monitor Birdie’s compliance frameworks
• Lead NHS DSPT, DSCR compliance and NHS interoperability (GP Connect, PDS)
• Maintain risk registers and third-party risk assessments
• Lead incident response for data protection and compliance breaches
• Develop KRIs/KPIs for leadership and board reporting

🎯 Requirements

• Strong familiarity with NHS DSPT, DSCR, NHS API (GP Connect, PDS)
• UK GDPR and Data Protection Act 2018 knowledge for fast-moving SaaS
• Experience in risk assessments, control design, and risk registers
• Ability translating complex regulations into actionable engineering/product requirements
• Clear policy and executive communication skills
• Relevant certification (CIPP/E, CIPM, CISM, CISA, ISO 27001/SOC 2) is a plus

🎁 Benefits

• Compensation: salary £70K – £85K
• Generous stock options and equity
• Flexible hybrid work in London HQ, home workspace budget, in-person meetups
• 33 days holiday, birthday day off, company shutdown holidays
• Family-first policies, private health insurance, wellbeing perks
• Cycle to work, pension contributions, transparent culture