← All roles

Head of Compliance & Data Privacy

Avalere Health· Group – Legal & Compliance - Compliance
Apply on company site
Hybrid (London / Manchester)Permanent/full-timePosted 4d ago

About the role

Lead the day-to-day operation and continuous development of Avalere Health’s global compliance and data privacy programmes, advising on regulatory, client and reputational risk and embedding practical controls across the business.

Responsibilities

  • Lead and develop Avalere Health’s global compliance programme.
  • Provide pragmatic compliance advice, assess new business initiatives, and escalate material risks to the General Counsel with clear options and business implications.
  • Monitor regulatory developments and support the implementation of proportionate controls and governance processes.
  • Manage privacy compliance and risk across the organisation in line with applicable global privacy requirements, escalating significant matters to the General Counsel as appropriate.
  • Advise on responsible data use, privacy by design, safeguards and proportionate controls, and assess privacy risks arising from new products, systems, suppliers, services and data uses, including international transfers and third-party processing.
  • Manage or support key privacy processes, including DPIAs, DSRs, privacy notices, ROPAs and personal data incident assessment.
  • Monitor applicable AI legislation, regulatory guidance, industry expectations and client requirements and translate requirements into proportionate, practical compliance processes and controls for Avalere Health’s services, internal use of AI, suppliers and business development activity.
  • Support assessment of AI use cases, including risk identification, documentation, human oversight, data protection considerations, vendor due diligence and approval requirements, working with the AI governance team, Legal, Information Security, Technology and business stakeholders to embed AI compliance requirements.
  • Advise on and support the effective operation of anti-bribery and anti-corruption controls, including conflicts of interest, gifts, hospitality and interactions with third parties.
  • Oversee proportionate, risk-based due diligence on clients, suppliers and other third parties. Identify, document and escalate due diligence concerns, ensure required mitigations and approvals are in place, and refer matters outside delegated authority.
  • Complete relevant sections of client questionnaires and due diligence materials and support KYC and KYV processes.
  • Maintain and evolve compliance, privacy and AI compliance policies, procedures, guidance and governance frameworks. Manage training, completion monitoring, records and targeted awareness activity.
  • Coordinate compliance, privacy and AI compliance monitoring, control reviews and assurance activity. Prepare clear reporting and insights on material risks, incidents, trends, outstanding actions and lessons learnt for senior leadership and governance forums.
  • Manage reported compliance, privacy and AI compliance concerns, incidents and investigations.
  • Work with stakeholders and SMEs to preserve records, document findings, identify root causes, track remediation and coordinate compliance and privacy responses to regulators, auditors and substantive client requests as applicable.
  • Provide clear direction, supervision and development support to direct reports.
  • Build effective working relationships with senior and non-specialist stakeholders, adapting communication to the audience and securing engagement with compliance, privacy and AI compliance requirements.
  • Translate complex compliance and privacy issues into clear, actionable advice that supports informed decisions and balances commercial objectives, risk and ethical standards.

Qualifications

  • Substantial compliance and data privacy experience gained in-house, in professional services or in a regulated environment, including hands-on experience operating or improving compliance programmes.
  • Global data privacy experience: DPIAs, DSRs, personal data breaches, privacy notices and ROPAs; strong knowledge of UK and EU GDPR, understanding of HIPAA, and awareness of other global privacy requirements.
  • AI compliance experience: Knowledge of EU AI Act and assessing AI use cases, advising on implementation, risks and controls within a governance framework.
  • Due diligence and ABAC: Experience of third-party due diligence, anti-bribery and anti-corruption controls, and conflicts-of-interest processes.
  • Confidentiality and accountability: Ownership, integrity and discretion with sound judgement on escalation.
  • Senior stakeholder advisory: Ability to advise senior leaders on sensitive compliance and privacy matters and translate risks into practical options.
  • Leadership accountability: Experience setting expectations, reviewing work, managing performance and coaching team members.

Skills

Required:Compliance programme managementData privacy management (global)AI complianceThird-party due diligence (ABAC)

Benefits

  • up to 7% pension contribution
  • life insurance
  • income protection
  • private medical insurance
  • flexible hybrid working
  • option to work from anywhere across the globe two weeks each year
  • 25 days of annual leave plus two personal well-being days
  • gifted end-of-year holidays
  • early Summer Friday finish in June, July, and August
  • access to employee assistance program and health support
  • enhanced maternity, paternity, family leave, and fertility policies
  • on-demand support from partner Peppy
  • opportunities for on-demand training, global mobility
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Avalere Health

EVERY PATIENT POSSIBLE

Avalere Health is a global strategic partner for the healthcare industry. Learn how our advisory, medical, and marketing experts unite to reach every patient.

healthcare
Company profileWebsite

More open roles at Avalere Health