Head of Information Governance & Privacy (Remote)

11 Investments; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

11 Investments is seeking a Compliance & Information Governance Lead to own the company’s information governance, data protection and compliance programs. The role requires pragmatic, hands-on leadership across GDPR, privacy, information security and risk management, with broad interaction from Product and Engineering to senior leadership.

You will drive DPIAs/DPAs/ROPA, vendor due diligence, and incident response while aligning with ISO standards and DSP Toolkit.

Qualifications

• Strong hands-on GDPR and UK data protection experience, including DPIAs, DPAs, ROPA and data subject requests.
• Practical information security experience and ability to assess regulatory requirements and convert them into pragmatic guidance.
• Experience running compliance frameworks and audits (ISO 27001, ISO 9001, ISO 14001, DSP Toolkit or Cyber Essentials Plus).

Responsibilities

• Own information governance and data protection framework.
• Provide GDPR advice and manage DPIAs, DPAs, ROPA and privacy policies.
• Manage information security controls and vulnerability management.
• Lead ISO 27001, ISO 9001, ISO 14001 certifications and audits.
• Support DSP Toolkit compliance and audits.
• Oversee supplier due diligence and subprocessor reviews.
• Lead security and information governance incident response.
• Review data protection clauses in client and supplier contracts.
• Assist tenders, implementations and contract drafting.
• Deliver information security and compliance training.
• Advise exec team on data usage and AI.
• Coordinate with Clinical Safety Officer on medical device capabilities.

Skills

GDPR & Data Protection

Information Governance

Information Security

Regulatory Compliance

Risk Assessment

Vendor Due Diligence

Contract Negotiation

Incident Response

Privacy Policies

AI Data Usage

Tools

DSP Toolkit

ISO 27001

ISO 9001

ISO 14001

Cyber Essentials Plus

Job description

11 Investments is seeking a Compliance & Information Governance Lead to own the company’s information governance, data protection and compliance programs. The role requires pragmatic, hands-on leadership across GDPR, privacy, information security and risk management, with broad interaction from Product and Engineering to senior leadership.

You will drive DPIAs/DPAs/ROPA, vendor due diligence, and incident response while aligning with ISO standards and DSP Toolkit.