MedTech Operations & Programme Specialist (Governance, ESG & Insurance)

Deciphex Limited; Ireland; On-site; EUR 55,000 - 75,000; Full time

Benefits offered by this job

Work-from-home options

Career growth opportunities

Competitive salary

Job summary

Deciphex Limited in Ireland is seeking an experienced operational individual contributor for their risk and compliance function to ensure effective operational delivery across diverse core streams.

This hands-on role supports the maintenance of risk registers, insurance renewals, and ESG data. The ideal candidate has over 5 years of experience and will thrive in a dynamic startup environment offering competitive salary and work-from-home options.

Qualifications

• 5+ years in a risk or compliance role in healthcare, life sciences, medtech, or clinical services.
• Ability to manage complex, multi-stakeholder workflows independently.
• Experience with enterprise risk registers and reporting to senior stakeholders.

Responsibilities

• Own the operational delivery of risk and compliance function.
• Maintain risk register, coordinate insurance renewals, and track critical supplier risks.
• Gather and quality-check ESG data for reporting.

Skills

Risk management

Compliance coordination

Operational efficiency

Detail-oriented

Written communication

Job description

Location

• Dublin or UK based
• Occasional travel to Dublin office if Ireland based (Glasnevin) or UK if UK based (Kidlington) as well as USA

This role is not what the title suggests. Please read this before you apply.

If you have spent your career in banking, financial services, or insurance—and you are looking for more of the same, this role is not for you.

Deciphex are a medtech company. Our risk landscape spans AI‑powered medical software, clinical services in the UK and US, global commercial contracts, investor ESG obligations, and a multi‑entity supply chain.

The person we are hiring will sit at the centre of all of it. Not as a specialist in one domain, but as the person who connects the dots across all of them.

There is no team beneath this role. This is a very hands‑on operational individual contributor role. There are some established playbooks to follow. Others you will build from scratch.

There is real ownership, real variety, and real exposure to a company scaling fast in a genuinely complex industry. If that excites you more than a defined lane, keep reading.

Role Purpose

• This role is the operational engine of the function.
• This is a hands‑on execution role.
• There is no strategic, policy‑setting, board, or regulator‑facing element.
• The CRCO sets direction and owns the framework. You make it work day‑to‑day on a basis.

Core Workstreams

You will own the operational delivery of our Group risk and compliance function as well as ESG, insurance, and other core streams.

• Keep the infrastructure running, risk register maintained and prioritised, insurance renewals coordinated, critical supplier risks identified and tracked, ESG data gathered and accurate, incidents logged and chased to closure.
• Look across the business, spot what others cannot see, ask the difficult questions, and bring the right things to the surface.
• Own multiple core workstreams:
  • Risk register and reporting – gather and consolidate risk inputs from across the Group into a single, prioritised view ready for Board and investor audiences.
  • Critical supplier risk – identify dependencies that could hurt the business if they failed, and make sure those risks are understood, owned, and actively managed.
  • Insurance programme – coordinate multi‑entity renewals, mid‑term changes, certificate requests, and claims across Ireland, UK, US, and Canada.
  • ESG data – gather and quality‑check our annual ESG data for investor reporting and customer due diligence.
  • Incident and compliance coordination – maintain the Group incident log, track items to closure, and support audit and diligence requests.
  • Compliance Calendar & Workflow Operations – run the operational rhythm of the function, maintain the consolidated compliance calendar built by the CRCO, and prepare the CRCO's regular reporting packs by pulling status updates from functional leads.

What This Role Does NOT Do

• Build frameworks, policies, registers, or methodologies – that is the CRCO's work.
• Engage with the board, audit committee, investors, or regulators directly.
• Set risk appetite, policy positions, or escalation thresholds.
• Lead investigations, incident response, or audit findings – those stay with the relevant specialist function.
• Own clinical governance, ISO standards, GDPR decisions, regulatory submissions, or AI Act compliance – those are handled by dedicated teams.
• Negotiate contracts or interpret legal positions – handled by General Counsel.

Person Specification

Essential

• 5+ years in a risk or compliance role in healthcare, life sciences, medtech, or clinical services.
• Comfortable as a program coordinator across senior functional leads – chases, collates, follows up without needing to raise everything.
• Can hold ten live workstreams without dropping items.
• Experience with enterprise risk registers and reporting to senior stakeholders.
• Discreet – handles sensitive insurance, incident, and commercial data appropriately.
• Demonstrated ability to manage complex, multi‑stakeholder workflows independently.
• Judgment to distinguish what matters from what doesn't, and confidence to act on it.
• Highly organized. Detail‑oriented. Calendar‑driven.
• Demonstrable experience running multi‑stakeholder operational workflows to deadline.

Desirable

• Experience owning or contributing to a critical supplier or third‑party risk programme, including dependency mapping and resilience assessment.
• Exposure to vendor risk management, ESG data coordination, or incident reporting workflows in a regulated environment.
• Working familiarity with GDPR, ISO 27001, MDR/IVDR, CLIA/CAP – enough to coordinate with specialists, not to own the domain.
• Multi‑entity, multi‑jurisdiction group experience.
• Familiarity with ESG data frameworks and reporting obligations.

What Good Looks Like Here

• You do not need to be an expert in everything this role touches.
• ESG and insurance are learnable; we will support you.
• The ability to look at a list of 50 risks across five teams and instinctively know which three need attention is what we are hiring for.
• That judgment, combined with the drive to act, is essential.
• Understanding the rules well enough to know when to bend them, not to hide behind a process, and not to ignore it.
• Operationally relentless, organized, methodical, deadline‑driven.
• Strong written communicator for diligence responses, audit packs, and broker submissions.

What the role offers you

• A defined operational mandate with the CRCO setting direction.
• Hands‑on exposure across insurance, vendor risk, ESG, and Group‑wide compliance coordination.
• Competitive salary and benefits.

What are the benefits of working with Deciphex?

• Work‑from‑home options.
• A true sense of meaning by contributing to better patient outcomes.
• The opportunity to work alongside a world‑class, high‑performing team in a hyper‑growth startup environment.
• A chance to work on exciting and challenging unique projects.
• Regular performance feedback and significant career growth opportunities.
• Competitive salary with performance‑based annual increments.
• A highly collaborative and supportive, multicultural team.

Deciphex is an equal opportunities employer and we are committed to the principle of equality. All qualified applicants will be considered for employment without regard to age, race, religious beliefs, political views, gender identity, sexual orientation, national origin, family or marital status (including pregnancy), disability, membership of the traveling community or any other classification protected by applicable law.

A copy of our Privacy Policy can be viewed.