Senior InfoSec & Data Protection Officer UK/Remote

Unmind; United States; À distance; USD 160 000 - 227 000; Plein temps

Avantages offerts par ce poste

Private medical for you & your family

Equity in Unmind

Generous gender‑neutral parental leave

25 days holiday + birthday + celebrat​

Revive & Thrive Days – monthly

Flexible working

Remote-first within the UK

Annual learning budget

Free weekly therapy

Wellbeing support

Résumé du poste

Unmind is seeking a Principal Information Security & Data Protection Officer to lead its information security and privacy programmes. You will own ISO 27001 and GDPR compliance, coordinate with Engineering, Product and Legal, and act as the designated DPO to maintain trust across health data handling.

The role is remote-first within the UK, with monthly travel to London. A hands-on, senior contributor will set policy, advise leadership, and ensure robust security controls and DPIA processes.

Qualifications

• Experience implementing ISO 27001 within a global tech business.
• Expert knowledge of UK/EU GDPR including DPIAs and data subject rights.
• Experience acting as or closely with a Data Protection Officer.
• Ability to explain security and privacy to clients and senior leaders.

Responsabilités

• Lead Information Security management, maintaining ISO 27001 and Cyber Essentials; chair ISMS Board and drive day-to-day ISMS activities.
• Fulfil statutory DPO duties under UK/EU GDPR; manage DPIAs, data subject requests, breach assessments; coordinate with Legal and Commercial.

Connaissances

ISO 27001

Cyber Essentials

GDPR knowledge

DPO experience

Stakeholder communication

AI governance

Risk mitigation

Security certifications

Formation

Security certification

Description du poste

Unmind is seeking a Principal Information Security & Data Protection Officer to lead its information security and privacy programmes. You will own ISO 27001 and GDPR compliance, coordinate with Engineering, Product and Legal, and act as the designated DPO to maintain trust across health data handling.

The role is remote-first within the UK, with monthly travel to London. A hands-on, senior contributor will set policy, advise leadership, and ensure robust security controls and DPIA processes.