Head of Compliance and Governance

Healix; Bristol; On-site; GBP 60,000 - 90,000; Full time

Job summary

A leading health and clinical administration provider in the UK is looking for a Head of Compliance and Governance. In this role, you will lead the development and oversight of compliance frameworks, ensuring regulatory alignment and risk management. Ideal candidates will have extensive experience in healthcare compliance, solid knowledge of UK regulations, and proven management skills. This position offers a dynamic environment with opportunities to influence organisational culture.

Qualifications

• Proven experience in a senior compliance or governance role within healthcare.
• Strong knowledge of UK healthcare regulations and financial services compliance.
• Experience managing audits, inspections, and board-level reporting.
• Proven experience managing an Information Security Management System (ISMS).

Responsibilities

• Ensure compliance with healthcare regulations including CQC and GDPR.
• Lead internal audits, inspections, and regulatory reporting.
• Oversee board governance and committee structures.
• Promote a culture of compliance and ethical behaviour.

Skills

Proven experience in a senior compliance or governance role

Strong knowledge of UK healthcare regulations

Experience managing audits and inspections

Proven experience managing ISMS with ISO 27001

Excellent stakeholder management skills

Strong negotiation skills

Strong commercial acumen

Education

Degree in Law, Business, Healthcare Management or related field

Tools

ISO 27001

Job description

Overview

This job is brought to you by Jobs/Redefined, the UK's leading over-50s age inclusive jobs board.

Head of Compliance and Governance

About Healix Health

Healix Health Limited is a leading Healthtrust and Clinical Administration provider, supporting access to private healthcare delivery through robust operational, administrative, and clinical governance frameworks. With a team of over 150 dedicated professionals, we are committed to excellence, integrity, and patient-centred service.

Position Overview

The Head of Compliance and Governance will lead the development, implementation, and oversight of the organisation\'s compliance, risk, and governance frameworks. This includes ensuring compliance with healthcare regulations, financial services obligations (where applicable), and ethical standards. The role is pivotal in safeguarding the organisation\'s reputation, ensuring regulatory alignment, and fostering a culture of accountability and transparency.

Required skills, knowledge and experience

Essential

• Proven experience in a senior compliance or governance role within healthcare, financial services, or a regulated environment, preferably in an SME environment.
• Strong knowledge of UK healthcare regulations and financial services compliance (FCA/PRA).
• Experience managing audits, inspections, and board-level reporting.
• Proven experience of managing an Information Security Management System (ISMS), including ISO 27001 certification.
• Degree in Law, Business, Healthcare Management, or related field.
• Excellent stakeholder management skills, with the ability to build relationships across all levels of the organisation.
• Strong negotiation skills to influence decisions and achieve positive outcomes.
• Strong commercial acumen, with the ability to balance risk oversight with business agility and growth priorities.

Desirable

• Professional qualifications (e.g. ICA, ICSA, IRM, FCA authorised compliance officer).
• Experience with NHS Provider Licence, SMCR, or FCA authorisation processes.
• Familiarity with digital health compliance and financial crime prevention.

About the role

Responsibilities

Healthcare Compliance and Governance

• Ensure compliance with Care Inspectorate of Wales (CIW) and NHS England, CQC, ICO, GDPR, MHRA, and other healthcare-specific regulations.
• Maintain the NHS Provider Licence and ensure adherence to continuity of service (CoS) conditions.
• Lead internal audits, inspections, and regulatory reporting for healthcare operations.
• Oversee board governance, committee structures, and assurance frameworks.

Financial Services Regulatory Compliance

• Ensure compliance with the Financial Conduct Authority (FCA) and Prudential Regulation Authority (PRA) where the organisation handles:
• Patient funds
• Instalment payments
• Insurance-related services
• Financial transactions on behalf of third parties

• Maintain awareness of obligations under the Financial Services and Markets Act 2000 (FSMA) and ensure appropriate authorisations or exemptions are in place.

• Oversee systems and controls to prevent financial crime, including anti-money laundering (AML), fraud, and bribery.
• Ensure compliance with FCA Conduct Rules and the Senior Managers and Certification Regime (SMCR), where applicable.
• Liaise with external legal and regulatory advisors to manage FCA authorisation processes or appointed representative arrangements, if relevant.

Risk Management

• Lead the enterprise risk management (ERM) process, including financial, operational, and reputational risks.
• Maintain the organisation\'s risk register and ensure timely escalation of key risks.
• Chair the Risk and Compliance Committee and report to the Board on risk exposure.

Culture, Training & Ethics

• Promote a culture of compliance, integrity, and ethical behaviour across the organisation.
• Deliver training on healthcare and financial regulatory obligations, including non-financial misconduct standards.
• Ensure the organisation meets FCA expectations around workplace culture, diversity, and psychological safety.

About the company

All around the world, Healix safeguards people\'s health and wellbeing.

Required Criteria

• Proven experience in a senior compliance or governance role within healthcare, financial services, or a regulated environment, preferably in an SME environment.
• Strong knowledge of UK healthcare regulations and financial services compliance (FCA/PRA).
• Experience managing audits, inspections, and board-level reporting.
• Proven experience of managing an Information Security Management System (ISMS), including ISO 27001 certification.

Desired Criteria

• Professional qualifications (e.g. ICA, ICSA, IRM, FCA authorised compliance officer).
• Experience with NHS Provider Licence, SMCR, or FCA authorisation processes.

Skills you\'ll need