Risk & Compliance Manager, Doctor Care Anywhere
£55k
Online GP platform and app
Posted today
Online GP platform and app
201-500 employees
Posted today
£55k
201-500 employees
Company mission
To make healthcare transparent.
Role
Who you are
- Proven experience for at least five years previously managing compliance, risk, and governance frameworks, particularly ISO 27001, and third-party risk assessments. (Essential)
- Minimum two year experience in healthcare governance background operating in a senior role
- Experience in managing Risk Register and policies
- Experience conducting audits, assurance reviews, and regulatory monitoring
- Previous managerial experience (desirable)
- Knowledge of the UK GDPR and Data Protection Act (Essential)
- Knowledge of CQC framework (Essential)
- Strong knowledge of security, risk management, and regulatory compliance methodologies
- Understanding of Risk Management Systems, able to produce detailed reports with analytical narrative
- Strong interpersonal skills, with the ability to engage stakeholders at all levels
- Strong analytical and reporting skills to track and trend key risk themes
- Relevant industry certifications (e.g., ISO 27001 Lead Auditor, CISSP, CISM) highly desirable
What the job involves
- The Risk & Compliance Manager is responsible for delivering and maintaining risk and compliance activities across Doctor Care Anywhere (DCA)
- This includes owning the risk register, ensuring compliance with ISO 27001 and CQC regulations, and overseeing governance processes
- The role plays a key part in maintaining robust risk management frameworks, regulatory assurance programs, and aligning DCA with industry standards and best practices
- The post holder will lead the development and implementation of effective risk management and CQC compliance frameworks while actively managing governance processes, policies, and patient safety initiatives
- Project manage CQC inspections and other internal/external regulatory reviews, ensuring adherence to compliance requirements before, during, and after inspections
- Embed a strong understanding of CQC regulations across the business, ensuring compliance is integrated into daily operations
- Stay updated on regulatory changes and advise on necessary policy and procedural updates
- Manage and maintain ISO 27001 certification, including project management, documentation, testing, and cross-functional collaboration to ensure ongoing compliance
- Work closely with the Incidents & Complaints Manager to translate system learning and emerging themes into risk mitigation strategies
- Maintain a central repository of compliance evidence to streamline audits and client assurance processes
- Maintain and manage the corporate risk register, ensuring effective documentation and mitigation of risks
- Work with operational teams to embed a strong understanding of risk management and how to identify, assess, and mitigate risks at the team level
- Educate teams on operational risks that contribute to the overall corporate risk strategy
- Develop and implement risk management strategies, including risk identification, assessment, mitigation, and monitoring
- Oversee third-party risk management, ensuring appropriate security assessments of supply chain partners in collaboration with Finance and Procurement
- Analyse incidents and complaints for risk management and quality assurance, identifying trends and areas for improvement
- Prepare reports, papers, and presentations for internal committees to document risk management activities and appetite
- Support the governance audit framework by planning and conducting internal audits as a second-line check
- Undertake investigations for incidents and complaints, ensuring a structured and thorough approach
- Own and manage the policy schedule and repository, ensuring compliance with industry regulations and best practices
- Foster a culture of collaboration in defining and maintaining effective policy management at DCA
- Monitor regulatory changes and ensure organizational policies remain current and compliant
- Work with key stakeholders to implement necessary policy and procedural updates
- Ensure audit and governance reports are accurate, complete, and submitted to the appropriate committees
- Act as a primary point of contact for governance matters, facilitating governance committees and liaising with external partners
- Engage with the Executive Team and Heads of Departments, maintaining a high level of stakeholder interaction and autonomy in the role
- Support client security and business partner assurance programs, responding to security-related queries and audits
- Prepare for client and partner security reviews, managing outstanding actions through to completion
- Develop and maintain governance, risk, and compliance (GRC) communication channels, including internal reporting tools and team bulletins
- Develop and deliver training programs on compliance, risk management, and governance, working closely with clinical management on best practices
- Collaborate with Learning & Development teams to integrate risk awareness into company-wide training programs
- Promote a strong culture of compliance and risk awareness across all teams
- Organisational wide impact
- Deputise for the Head of Risk, Governance and Compliance as required
- Provide cross-cover for Incident & Complaints Manager as required
Application process
- Application Deadline: Provisional closing date of Midday Thursday 10th April (We may close the advertisement early if we receive a sufficient number of applications)
Salary benchmarks
Our take
There are mixed opinions about virtual GP services and various ideas around what can and can’t be treated virtually. In recent years, the growth of online doctoring services has exceeded what we probably thought possible. Many are not signed up to an in-person GP anymore and rely on apps like Babylon Health, or Doctor Care Anywhere, an online healthcare platform and application.
Founded in 2013, the company not only offers services to individuals, but companies are also able to sign up employees, which further expands the company’s reach and exposure. The company launched a mental health programme proposition in 2021, highlighting the ongoing work the practice does alongside its day-to-day appointments and referrals.
Having a well-established partnership with AXA Healthcare, the company has just acquired a loan of $15.6 million from the company. This has been said to further tie Doctor Care Anywhere with AXA but also highlights the trust in which the company has for them. This loan will be used to develop more innovative healthcare pathways and it's exciting to see how the company continues to pioneer initiatives in the healthcare system.
Steph
Company Specialist at Welcome to the Jungle
Insights
14% employee growth in 12 months
Company
Funding (1 round)
Jun 2020
$15.9m
CONVERTIBLE
Total funding: $15.9m
Company benefits
- Free Private Medical Insurance (savings on vision and dental care plus 40% off Nuffield Health gym membership)
- Doctor Care Anywhere subscription for you + 5 members of your friends or family
- Company bonus
- 25 days holiday + bank holidays
- 4 x charity days a year
- Birthday Day Off!
- Enhanced Maternity and Paternity pay
- Life Assurance
- Bike2Work scheme
- Cross-team collaboration opportunities in an autonomous environment
- Remote / Flexible Working with contribution towards home set up and your laptop provided
- Range of Development opportunities including learning and progression
- Pool Table, PlayStation and karaoke machine
Company HQ
Temple, London, UK
Leadership
Bayju Thakar
(CEO)Previously Management Consultant at McKinsey & Company has recently become CEO EMEA of Prenetics.
Share this job
View 1 more job at Doctor Care Anywhere