Risk & Compliance Manager

Posted 8 Days Ago
Be an Early Applicant
London, Greater London, England, GBR
In-Office
Senior level
Healthtech • Telehealth
The Role
Define, embed and monitor Birdie’s compliance frameworks across data protection, information security and health governance. Lead NHS DSPT and DSCR compliance, assure GP Connect/PDS integrations, maintain risk register and controls, run third-party risk assessments and audits, lead data protection incident response, and build KRIs/KPIs for leadership and the board.
Summary Generated by Built In

🐦 About Birdie

At Birdie, we’re reimagining care for older adults. We’re building the technology that powers the future of home healthcare, empowering care teams with tools to deliver better, more dignified care, and enabling older people to thrive in their own homes for longer. Our all-in-one solution powers millions of care visits every month, equipping care providers with the tools they need to deliver exceptional, efficient care.

We’re not here to tinker at the edges. We’re here to radically transform a broken system.

That’s why we’ve built an all-in-one platform that supported over 60 million care visits and enabled care for 116,000 individuals in 2025, and we continue to grow our impact. We’re scaling fast, but staying true to our purpose. That’s why we’re proud to be a B Corp, using business as a force for good.

Founded in 2017, Birdie is backed by world-class investors like Index Ventures, Sofina and Omers. In 2023, we ranked #6 in the Deloitte Fast 50, making us one of the fastest-growing tech companies in the UK. You can check out more about our impact and recognition here.

But speed isn’t the point. Impact is.

⚡️ Your mission

As Birdie's Risk & Compliance Manager, you will be responsible for defining, embedding, and monitoring Birdie’s compliance frameworks across data protection, information security, and health system governance.

You will lead our compliance programs for critical health-sector standards—including the NHS Data Security and Protection Toolkit (DSPT) and Digital Social Care Record (DSCR) compliance—and assure all requirements for core NHS service integrations such as GP Connect and the Patient Demographic Service (PDS).

You will work closely with our engineering, product, legal, and operational teams, and will be supported by our General Counsel and external Data Protection Officer (DPO).

🦸‍♀️ How you will contribute

  • Own data protection compliance across product and operations, working with our external DPO on DPIAs, RoPA and information rights processes

  • Lead the annual NHS DSPT submission and keep us at "Standards Met" year-round, alongside DSCR and clinical risk alignment (DCB0129/0160) where applicable

  • Assure our NHS interoperability connections - GP Connect, PDS, and future health data integrations - meet compliance and data flow standards

  • Maintain Birdie's risk register and control frameworks, running third-party risk assessments and internal audit cycles

  • Lead incident response for data protection and compliance breaches, from root-cause analysis through remediation

  • Build KRIs/KPIs for leadership and the board, and champion a proactive, risk-aware culture across tech, product and go-to-market teams

🤩 You’ll thrive here if...

  • You have strong familiarity with NHS DSPT, DSCR, and NHS API assurance frameworks (GP Connect, PDS)

  • You know UK GDPR and the Data Protection Act 2018 inside out, and can apply it practically in a fast-moving SaaS environment

  • You've led or played a major role in risk assessments, control design, and managing a business risk register - ideally alongside an external DPO or legal counsel

  • You can turn complex legal and health-system regulations into clear, actionable requirements for engineers and product teams

  • You write and speak with clarity, whether it's a policy, an executive report, or team training

  • You have sound judgment and the confidence to challenge while keeping strong working relationships; a relevant certification (CIPP/E, CIPM, CISM, CISA, or similar) or familiarity with ISO 27001/Cyber Essentials/SOC 2 is a plus

🧠 Imposter syndrome is real — and we don’t expect you to tick every box. If you're excited about our mission and think you could make a difference here, we want to hear from you.

🌈 What you’ll get from us

We believe people do their best work when they’re supported, trusted and inspired. Here’s how we build a world-class employee experience:

💸 Compensation

  • Competitive base salary, reviewed against benchmarks annually

  • Generous stock options - because we’re building this together

  • Bi-annual performance cycles with individual compensation reviews

🧠 Learning & Growth

  • Annual personal learning budget and access to training, coaching and mentorship

  • Time and space for growth - you set your development goals, we back them

🏡 Flexible Working

  • Hybrid working - up to 3 days per week in our incredible London HQ

  • Budget to set up your home workspace

  • Regular in-person meet-ups, socials and offsites

🏖 Time Off

  • 33 days holiday (25 days + public holidays)

  • Extra day off on your birthday (use it whenever you like!)

  • Company shutdown between Christmas and New Year

  • 2 volunteering days each year to give back to causes that matter

👶 Family-first Policies

  • Industry leading paid primary and secondary caregiver leave

  • 5 paid days for fertility treatments for those who need it

  • Private health insurance with AXA

  • Wellbeing perks via Happl (gym discounts, mental health support, and more)

🚲 Other Perks

  • Cycle to work scheme

  • 4% employer pension contribution when you contribute 5% (UK)

  • A deeply human, radically transparent culture

Why Birdie?

Because you want to do meaningful work that improves lives - and grow at speed while doing it. We’re building more than a product - we’re building a movement. A movement to show that tech, when built with empathy and integrity, can change lives.

We’re a team of entrepreneurs, dreamers, and doers. Join us to shape the future of care, work alongside ambitious, kind people, and help reimagine how society cares for its older adults. We dream big, act fast, and work collaboratively with one goal in mind: to create a world where we all age with confidence.

⚖️ Equal Opportunities Statement

We’re committed to building a diverse team and inclusive culture. That means creating a hiring process that gives everyone a fair chance regardless of background, identity or lived experience.

Need adjustments or support during the application process? Let us know. We’re here to help.

Ready to build the future of care?

Apply now. Be part of something that matters.

Skills Required

  • Familiarity with NHS DSPT, DSCR, and NHS API assurance frameworks (GP Connect, PDS)
  • Deep knowledge of UK GDPR and the Data Protection Act 2018 and practical application in a SaaS environment
  • Experience leading risk assessments, control design, maintaining a business risk register, and running third-party risk assessments
  • Experience leading data protection incident response including root-cause analysis and remediation
  • Ability to translate complex legal and health-system regulations into actionable requirements for engineers and product teams
  • Strong written and verbal communication skills; policy writing, executive reporting, and team training experience
  • Relevant certification (CIPP/E, CIPM, CISM, CISA) or familiarity with ISO 27001, Cyber Essentials, SOC 2
  • Experience working with an external Data Protection Officer or legal counsel
Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Porto Alegre
197 Employees
Year Founded: 2017

What We Do

We are hiring: www.birdie.care/join-us Birdie equips domiciliary care providers with the essential digital tools they need to manage, grow and succeed in delivering outstanding care now and in the future. Operating across the UK and Europe, the B-Corp certified business was named as one of two top Home Health Tech providers in the 150 Most Innovative Digital Health startups of 2021, and works closely alongside health and research bodies to further proactive and preventative care at home.

Similar Jobs

Amoria Group Logo Amoria Group

Governance Risk and Compliance Manager

Analytics • Business Intelligence • Consulting • Renewable Energy
In-Office
Manchester, Greater Manchester, England, GBR
35 Employees
60K-70K Annually
In-Office
Stockport, Greater Manchester, England, GBR
25000 Employees
In-Office
Lincoln, Lincolnshire, England, GBR
3092 Employees
In-Office
London, Greater London, England, GBR
672 Employees

Similar Companies Hiring

Sailor Health Thumbnail
Healthtech • Social Impact • Telehealth
New York City, NY
20 Employees
Granted Thumbnail
Artificial Intelligence • Healthtech • Insurance • Mobile • Financial Services
New York, New York
23 Employees
OneImaging Thumbnail
Healthtech
Miami, FL
62 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account