Compliance Manager, Semble

• We're looking for someone who brings a commercial mindset to compliance and understands that this role is to enable the business to grow confidently and safely. You know how to find pragmatic solutions that balance legal obligations with business needs
• At least 3+ years of practical experience working in a compliance, data protection, or privacy role within the UK
• Proven experience working within a SaaS startup or scale-up agile environment with daily or weekly product releases
• Direct experience handling special category data, particularly health data, with an understanding of the heightened sensitivities and regulatory requirements involved
• Deep, applied knowledge of UK GDPR and EU GDPR, for example practical experience conducting DPIAs, managing data subject rights (including DSARs), and responding to supervisory authority queries
• Strong communication skills, with the ability to translate legal and regulatory requirements into clear, actionable guidance for non-legal teams
• A commercial and pragmatic approach to compliance

Desirable

• As Compliance Manager, working closely with our Head of Compliance and our General Counsel, you'll play a crucial role in upholding the standards that keep our patients, clients, and business protected
• Safeguard sensitive healthcare data and enable safe, compliant growth: Ensure we operate under strict regulatory frameworks across the UK, France and Ireland, including UK and EU GDPR, clinical safety standards, ISO 27001, Cyber Essentials+, FR HDS, and the NHS Digital Data Security and Protection Toolkit
• Develop and maintain compliance documentation: Create and improve policies, procedures, and frameworks that keep pace with our growth and evolving regulatory landscape
• Contribute to risk management and assurance: Maintain our risk register, conduct Data Protection Impact Assessments (DPIAs), and work with internal and external auditors to ensure our compliance position remains strong
• Manage critical data protection processes: Handle data subject access requests (DSARs), complaints, and queries, ensuring we respond to patients and healthcare professionals with care and in line with our legal obligations
• Act as a trusted compliance advisor: Translate complex regulatory requirements into practical guidance for product, engineering, and commercial teams, helping them move quickly while staying compliant and maintaining up-to date knowledge of compliance or regulatory changes on the horizon
• Embed a culture of compliance across the entire company: Design and deliver training and enablement programmes so that everyone at Semble - from engineers to client-facing teams - understands that protecting the confidentiality, availability and integrity of personal data is everyone's responsibility
• Support clinical safety initiatives: Contribute to ensuring our platform meets the rigorous regulatory standards expected in healthcare and directly impacts patient care
• At this mid-level role at Semble, we expect you to work with a high degree of independence on day-to-day compliance matters, while collaborating closely with the Legal & Compliance team and stakeholders across the business
• You'll take ownership of core compliance processes and be a go-to resource for teams navigating data protection and regulatory requirements