Compliance Officer in London

We are a leading consultancy with a purpose to make an enduring impact on health and healthcare. We work with leaders and frontline teams to improve health, transform healthcare, drive adoption of innovation and create value through investment. Our consultancy serves the entire healthcare sector, from payors and providers of care, to life science companies, health tech and sector suppliers and health investors. We provide end-to-end services, from strategy through implementation, accelerated by data, digital and AI. We shape opinion through evidence-based thought leadership on key issues affecting health.

The Compliance Officer sits within the Data Operations team and reports directly to the Director of Data, Analytics and Intelligence. The role is the operational coordinator for information governance (IG), data protection, and regulatory compliance across CF. It is also an enabling role within Data Operations, responsible for the workflow management and project coordination that allows the team to operate efficiently. The Compliance Officer provides day-to-day coverage of the DPO responsibilities that sit beneath the Director of Data, Analytics and Intelligence, who holds the statutory Data Protection Officer designation. The Compliance Officer will undertake recognised DPO training and certification, enabling them to act as the primary point of contact for all compliance-related queries across the business. The role primarily spans three interconnected business functions — IT, People, and Data Operations — with additional support to the wider corporate team as needed. The Compliance Officer is responsible for reducing regulatory risk, maintaining audit readiness, and providing structured assurance to the Board and Executive Committee.

Responsibilities include:

• Information governance and data protection
• ISO certification coordination
• Data breach compliance and incident response
• People and employment compliance
• Regulatory monitoring
• Legal and IP query management

This is an excellent opportunity for a graduate with a legal background — or someone early in their compliance career — to develop a broad and substantive compliance portfolio within a dynamic, data-rich healthcare consultancy. Full training and professional development support will be provided.

The requirements, responsibilities and duties of the role will include, but are not limited to:

• Policy Development and Maintenance: Develop, maintain and regularly review internal compliance policies to ensure staff are equipped to meet regulatory obligations.
• Data Protection Officer: Act as the operational Data Protection Officer and primary internal contact handling day-to-day data protection queries.
• Data Breach Compliance and Incident Response: Ensure CF’s data breach policy and incident response process is embedded across the business.
• Information Governance Coordination: Coordinate the monthly IG Committee, including scheduling, agenda-setting, minute-taking and action tracking.
• Training and Awareness: Maintain and deliver the CF-wide IG training programme.
• Data Operations Workflow Management: Maintain the Data Operations intake and triage process for incoming data requests.

Requirements:

• A legal degree or equivalent legal or compliance qualification, or demonstrable experience in a compliance, information governance or data protection role.
• Demonstrable knowledge of UK GDPR and the Data Protection Act 2018; understanding towards or willingness to pursue recognised DPO certification.
• Strong attention to detail with the ability to identify risk in complex documentation.
• High personal integrity and the confidence to raise concerns or challenge decisions where necessary.
• Excellent written and verbal communication skills.
• Discretion and professionalism in handling sensitive personal and commercial information.

We follow a hybrid working model that balances in person connections and remote work to drive exceptional client impact. Our commitment to Diversity & Inclusion is strong, and we are committed to building an inclusive and supportive culture where diversity thrives.

Benefits include:

• Holiday entitlement: 25 days/year for staff and 30 days/year for leadership.
• Pension contributions.
• Access to a flexible benefits programme.
• Income protection and enhanced sick pay.
• Life insurance.
• Flexible working policy.
• Employee assistance and wellness programme.