Senior InfoSec & Data Protection Lead (Remote UK)

Unmind; London (KY); Remote; USD 161,000 - 241,000; Full time

Benefits offered by this job

Private medical for you & family

Equity in Unmind

Generous parental leave

25 days holiday + birthday + celebra‑t

Revive & Thrive Days

Flexible working

Remote-first UK

Annual learning budget

Free weekly therapy

Wellbeing support via WellHub & Bippit

Job summary

Unmind is seeking a Principal Information Security & Data Protection Officer to lead our Information Security and Data Protection programmes. You will work closely with Commercial, Engineering, Product and Legal, owning end-to-end security and privacy for health data at scale.

This hands-on senior role requires deep ISO 27001 and GDPR expertise, experience as or with a DPO, and the ability to provide clear, practical guidance to senior leaders.

Qualifications

• Experience implementing and maintaining ISO 27001 certification in a global tech business.
• Practical knowledge of UK/EU GDPR, including DPIAs, rights requests, data breaches, and transfers.
• Experience acting as or closely with a Data Protection Officer (DPO).
• Ability to clearly explain data security/privacy to clients and stakeholders.

Responsibilities

• Lead Information Security & Data Protection programmes across the business, acting as DPO.
• Maintain ISO 27001:2022 and Cyber Essentials, chair ISMS Board, manage policies, risk and audits.
• Oversee security testing, incident management, and risk mitigation with Engineering, Product and Legal.
• Lead AI governance, including AI policy, use-case risk reviews, and ISO alignment.
• Manage pre-sales, RFPs, DPAs, and privacy considerations for new products and suppliers.
• Drive security education and awareness across the organisation and report to ELT/Board.

Skills

ISO 27001

GDPR & DPIAs

DPO collaboration

AI risk management

Stakeholder comms

Security risk mgmt

Independent advisory

Integrity

Client-facing

Data governance

Job description

Unmind is seeking a Principal Information Security & Data Protection Officer to lead our Information Security and Data Protection programmes. You will work closely with Commercial, Engineering, Product and Legal, owning end-to-end security and privacy for health data at scale.

This hands-on senior role requires deep ISO 27001 and GDPR expertise, experience as or with a DPO, and the ability to provide clear, practical guidance to senior leaders.