Compliance Manager

Semble; Greater London; Híbrido; GBP 50.000 - 60.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Private health insurance

Equity / share options

Hybrid / flexible work

MacBook and home-office setup

Descripción de la vacante

Semble is a HealthTech company protecting over 9 million patient records. The Compliance Manager role sits with the Head of Compliance and General Counsel to uphold data protection standards across the UK, France, and Ireland, including GDPR, ISO 27001, and NHS security frameworks.

You will translate complex regulatory requirements into practical guidance for product, engineering, and commercial teams, fostering a culture of compliant growth and data integrity across the business.

Formación

• Strong knowledge of UK GDPR and EU GDPR with practical DPIA experience.
• Experience translating regulatory requirements into actionable guidance for non-legal teams.
• Experience handling DSARs and data protection queries.
• Commercial and pragmatic approach to compliance.

Responsabilidades

• Safeguard sensitive health data and enable compliant growth across UK and EU contexts.
• Develop and maintain compliance documentation and policies.
• Contribute to risk management, DPIAs, and audits to ensure robust compliance posture.
• Manage data protection processes including DSARs and inquiries.

Conocimientos

UK GDPR

DPIAs

DSARs

Regulatory guidance

Data protection

Communication

Herramientas

ISO 27001

Descripción del empleo

Are you looking to have an impact and be part of something special, such as shaping the future of healthcare?

Do you want to protect over 9 million patient records and enable safe, compliant growth at a fast-growing HealthTech company? Are you ready to bring a commercial mindset to compliance, working with special category data where your expertise directly impacts patient care?

At Semble, we are on a mission to enable health professionals to amplify their impact. We improve the way healthcare is delivered to millions of people by providing doctors and their teams with powerful, innovative, intuitive, and secure software. Our cloud-based clinical system is already used by thousands of clinicians, making their lives easier and saving them money, while structuring their health data to help research.

We are a passionate and driven team, proud to unite under strong cultural drivers:

• Impact – We do work that matters.
• Collaboration – We are in it together.

We are also quick to embrace new technologies: we have rapidly adopted AI internally, and we are always looking to work with people who are excited to augment their work with AI.

This role can be fully remote in the UK and France (with occasional travel to our London or Paris offices). We are unfortunately not able to consider candidates located outside these locations at this stage.

What you will be doing

When 16,000+ healthcare professionals trust us with 9 million+ patient records, every action matters. Data protection and compliance are fundamental to our mission of amplifying the impact of healthcare professionals.

As Compliance Manager, working closely with our Head of Compliance and our General Counsel, you'll play a crucial role in upholding the standards that keep our patients, clients, and business protected.

• Safeguard sensitive healthcare data and enable safe, compliant growth: Ensure we operate under strict regulatory frameworks across the UK, France and Ireland, including UK and EU GDPR, clinical safety standards, ISO 27001, Cyber Essentials+, FR HDS, and the NHS Digital Data Security and Protection Toolkit
• Develop and maintain compliance documentation: Create and improve policies, procedures, and frameworks that keep pace with our growth and evolving regulatory landscape
• Contribute to risk management and assurance: Maintain our risk register, conduct Data Protection Impact Assessments (DPIAs), and work with internal and external auditors to ensure our compliance position remains strong
• Manage critical data protection processes: Handle data subject access requests (DSARs), complaints, and queries, ensuring we respond to patients and healthcare professionals with care and in line with our legal obligations
• Act as a trusted compliance advisor: Translate complex regulatory requirements into practical guidance for product, engineering, and commercial teams, helping them move quickly while staying compliant and maintaining up-to date knowledge of compliance or regulatory changes on the horizon
• Embed a culture of compliance across the entire company: Design and deliver training and enablement programmes so that everyone at Semble - from engineers to client-facing teams - understands that protecting the confidentiality, availability and integrity of personal data is everyone's responsibility
• Support clinical safety initiatives: Contribute to ensuring our platform meets the rigorous regulatory standards expected in healthcare and directly impacts patient care

What we are looking for

At this mid-level role at Semble, we expect you to work with a high degree of independence on day-to-day compliance matters, while collaborating closely with the Legal & Compliance team and stakeholders across the business. You'll take ownership of core compliance processes and be a go-to resource for teams navigating data protection and regulatory requirements.

We're looking for someone who brings a commercial mindset to compliance and understands that this role is to enable the business to grow confidently and safely. You know how to find pragmatic solutions that balance legal obligations with business needs.

• At least 3+ years of practical experience working in a compliance, data protection, or privacy role within the UK
• Proven experience working within a SaaS startup or scale-up agile environment with daily or weekly product releases.
• Experience with Electronic Health Record software
• Direct experience handling special category data, particularly health data, with an understanding of the heightened sensitivities and regulatory requirements involved
• Deep, applied knowledge of UK GDPR and EU GDPR, for example practical experience conducting DPIAs, managing data subject rights (including DSARs), and responding to supervisory authority queries
• Strong communication skills, with the ability to translate legal and regulatory requirements into clear, actionable guidance for non-legal teams
• A commercial and pragmatic approach to compliance

Nice to have (not mandatory)

• Experience with vendor management.
• Proficiency in French.
• Knowledge of French data protection regulation and regulatory frameworks relating to health data.
• Direct experience in a clinical or healthcare setting, e.g. as a clinician, practice manager, or other healthcare professional.

What you'll get in return

• The great feeling of knowing you're doing something that matters: shaping the future of healthcare.
• £50,000–£60,000 (based on your experience and the value you bring).
• Autonomy and ownership – we'll set the vision and share the context, then we trust you to run with things.
• 36 days off: 25 holidays + bank holidays + 3 extra days (birthday and 'feel good' days)
• Company equity – everyone is eligible for Semble share options.
• Comprehensive health & wellbeing support – including private health insurance, mental health support, and free therapy sessions through Oli.
• Hybrid & flexible work environment – work from anywhere in the UK, with flexibility to work across Europe.
• Get the tech you need – the latest MacBook and your pick of equipment to set up your home office ergonomically.
• Work alongside an inspiring team – our founders have a successful startup exit, and your future colleagues are knowledgeable innovators in their field.
• The usual perks: barista coffee, tea, fruit, happy hours and team activities.

We welcome applications from people of all backgrounds and walks of life, including those from groups typically underrepresented in the technology industry. We also encourage applications from disabled and neurodiverse candidates — if there are any adjustments we can make to support you throughout the recruitment process, please do let us know.