Principal Information Security & Data Protection Officer
Unmind · London, HQ · GB
Health Tech
–
Not yet analysed
Demand82
Career growth78
Healthcare fit58
Remote potential65
5-year outlook
Senior health-tech security and privacy leadership roles should remain well compensated as GDPR, AI governance and client assurance demands grow. Exact pay depends on location and seniority; no salary is stated in the posting.
Clinical license
Not required
Applicant reach
narrow
Seniority
senior
Employment type
full-time
Date found
2026-10-27
Intelligence details
Flexible work details
- Engagement type
- Permanent
- Hours
- Full-time
- Eligible countries
- United Kingdom
Eligibility, licensing, and location restrictions can change. Always confirm details on the source posting before applying.
Why this is worth applying to
Worth applying only if you already have substantial ISO 27001, GDPR and DPO/security compliance experience; clinical experience alone is unlikely to be enough. It is a strong route for clinicians who have moved into health-tech privacy, security or compliance leadership.
Who should apply
Clinicians with prior DPO, privacy, information security, compliance or clinical informatics leadership experience in health tech, NHS, pharma or regulated healthcare; especially those with ISO 27001, GDPR and AI governance exposure.
CV angle
Frame clinical experience around handling sensitive health data, confidentiality, regulatory compliance, risk assessment, incident escalation, audit readiness and cross-functional stakeholder management. Quantify any ISMS, GDPR/DPIA, DPA, penetration-test remediation, AI governance or board-reporting exposure, and do not claim security certifications or experience you do not have.
Skills to highlight
- ISO 27001 ISMS implementation and maintenance
- UK/EU GDPR and DPO statutory duties
- Privacy risk assessment and DPIAs
- Security incident management and remediation
- Vulnerability management and penetration-test tracking
- Third-party/DPA and client assurance reviews
- AI governance and ISO 42001 readiness
- Executive and board-level risk reporting
Role summary
A senior health-tech security and privacy leadership role owning Unmind's information security programme, ISO 27001/Cyber Essentials certification, AI governance and statutory DPO duties under UK/EU GDPR. It advises product, engineering, legal and commercial teams on protecting sensitive mental health data and assuring enterprise clients.
We publish our own intelligence summary, never the full job description. Always confirm details with the employer when you apply.