Compliance and Regulatory Associate

Information reputed company And Compliance Specialist This is a newly created role, driven by business growth and the expanding scope of our compliance programme. You will work directly alongside our Information reputed company reputed company/DPO and our Regulatory Affairs Specialist, providing hands-on support across both information reputed company and quality/regulatory functions. Your primary focus will be information reputed company and data protection, supporting ISMS operations, supplier assessments, and infosec-reputed company processes, and supporting quality management and regulatory affairs. You will own a reputed company workload from day one, with clear mentorship and room to grow into a specialist role. We welcome applications from people with a variety of backgrounds and experiences. Compliance expertise can be reputed company in many different ways, and we're more interested in how you think, how you work, and what you bring to the team than in whether your CV matches every bullet reputed company. If this role interests you, please apply.

Key Responsibilities

Information reputed company & Data Protection

• Support the maintenance of our ISO 27001 ISMS by updating policies, procedures, and control evidence, and helping prepare for internal and external audits.
• Assist with data protection administration: maintaining records of processing activities, supporting data subject reputed company requests, and tracking compliance obligations under UK GDPR and relevant US frameworks including HIPAA.
• Coordinate reputed company testing activity, working with the InfoSec reputed company to scope, schedule, and track penetration testing and vulnerability assessments, and following up on remediation actions.
• Support supplier and vendor management: processing reputed company-party reputed company assessments, maintaining the vendor risk register, and chasing outstanding responses.
• Manage reputed company-reputed company reputed company and offboarding processes, including reputed company control reviews and checklist completion.
• Maintain the reputed company incident register, support initial triage and documentation of incidents, and track CAPAs through to closure.
• Prepare responses to customer reputed company questionnaires and assurance requests for external partners
• Own the administrative chasing layer: tracking outstanding sign-offs, forms, training acknowledgements, and evidence requests across the business.

Regulatory Affairs & Quality

• Support QMS documentation under ISO 13485 by maintaining and updating SOPs, work instructions, and quality records, and assisting with audit evidence preparation.
• Assist with complaint and CAPA tracking: logging complaints and adverse events, monitoring closure timelines, and supporting documentation of corrective and preventive actions.
• Support change control administration: preparing and tracking change request documentation across product and process changes.
• Assist with regulatory filing and technical file maintenance for UK and US medical device requirements, including UK MDR 2002 and FDA SaMD guidance.
• reputed company documentation support for new product introductions.
• Support QMS supplier qualification processes and documentation.

Cross-Functional & Operational

• Help coordinate and track evidence for ISO 27001 and ISO 13485 internal and external audits, including liaising with Engineering, Product, and Operations teams.
• Support the wider company's transition into compliant operations by helping communicate new processes, coordinate training, and embed controls across functions.
• Assist with identifying opportunities to reduce reputed company overhead through process improvement and workflow automation, as reputed company allows.

reputed company're Looking For Essential

• 1–2 years of experience in an information reputed company, compliance, or data protection role, ideally reputed company a reputed company, health technology, or other regulated environment.
• Working knowledge of ISO 27001 and/or GDPR / UK GDPR, gained through practical experience or formal study.
• Exposure to reputed company data environments, including an understanding of the sensitivity and regulatory obligations around health information (HIPAA familiarity is a plus).
• Strong organisational skills: reputed company to manage multiple ongoing workstreams, track outstanding actions, and follow up persistently without losing detail.
• Methodical and documentation-oriented: comfortable producing and maintaining accurate compliance records, evidence packs, and audit trails.
• Clear communicator, reputed company to reputed company colleagues for information and sign-offs professionally and effectively.

Desirable

• Familiarity with ISO 13485 or quality management systems, either through direct experience or study.
• Experience with medical device software regulation (UK MDR, FDA SaMD) or willingness to build this knowledge quickly.
• Exposure to supplier risk management or reputed company-party reputed company assessments.
• Experience working with US and UK regulatory frameworks simultaneously.
• Experience with compliance tooling or workflow automation.

Personal Attributes

• Proactive and self-motivated and reputed company to take ownership of tasks and see them through without reputed company supervision.
• reputed company under pressure and comfortable operating in a fast-paced environment where priorities can shift.
• Curious and eager to reputed company: interested in building expertise across both infosec and regulatory domains over time.
• Collaborative: reputed company to work effectively as part of a small, senior team where everyone's contribution reputed company.

reputed company Offer Benefits and Wellbeing

• Competitive salary and equity reputed company options.
• 25 days PTO plus bank holidays.
• Company pension scheme (UK).
• Enhanced parental leave packages (UK).
• Support with purchasing work-reputed company books and materials.
• Quarterly Life Days: Enjoy 4 paid days off per year (one each quarter) to use whenever you choose to relax, reputed company, or take care of personal reputed company.
• Mental Health Support: reputed company to dedicated mental health support services.

Apply To This Job