Data and Information Governance Lead

Legal Counsel Proximie is on a mission to improve healthcare by transforming the world’s operating rooms into connected ecosystems of people, devices, and data. Our Intelligence Suite transforms operating room (OR) performance, keeping teams in sync and workflows on track to maximise throughput. Simultaneously our computer vision and AI capabilities capture real-time data and detect surgical events – improving quality of data outputs. The result: ORs are optimised like never before – with predictive analytics and automated notifications ensuring patients and staff are in the right place at the right time. Once practitioners are in the OR, our Surgical Suite enables real-time remote access and creates a secure video record of every procedure; improving training, education, and collaboration. It is an intuitive asset which helps instil a culture of continuous learning, accelerates the adoption of cutting-edge medical devices, and enhances surgical performance across the entire global workforce – improving outcomes and saving lives. Proximie was commercialised in 2019 and is available in over 500 facilities globally. Check out our Founder and CEO Nadine’s Origins Story here: https://www.proximie.com/about-us/ Position Overview This is a rare opportunity to help shape the legal and governance framework of a company transforming how surgery is delivered around the world. As Legal Counsel at Proximie, you will sit at the intersection of healthcare, technology, and data, helping ensure that the innovation powering our platform is built on a foundation of trust, compliance, and responsible data stewardship. Reporting to our Global Head of Legal in New York, you will serve as Proximie's lead legal advisor on data privacy, data protection, and data governance matters across the UK and international markets. Working closely with our product, engineering, security, clinical, and commercial teams, you will help navigate the complex regulatory landscape that governs the use of healthcare data, ensuring our technology can scale responsibly while maintaining the highest standards of patient privacy and compliance. This is a role with significant visibility and impact. You will partner directly with senior leaders, including our CTO, Chief Customer Officer, and CFO, to develop and implement pragmatic frameworks for data governance, privacy-by-design, AI governance, information security, and regulatory compliance. You will be a key voice in shaping how Proximie manages one of the most sensitive and high-stakes categories of data in the world, enabling innovation while safeguarding the trust of healthcare providers, clinicians, and patients. Beyond privacy and governance, you will provide strategic legal support on customer, supplier, and partnership agreements, with a particular focus on data protection, information-sharing, and regulatory risk. You will help build scalable legal processes that support our continued growth across healthcare systems, including the NHS and leading international healthcare organizations. We move quickly and operate in a highly dynamic environment. We're looking for a lawyer who combines deep expertise in privacy and data governance with sound commercial judgment—someone who can identify risks, develop practical solutions, and enable the business to move forward confidently. In return, you'll have genuine ownership, direct access to leadership, and the opportunity to influence how a global healthtech company approaches one of its most important strategic assets: data. Job Responsibilities Advise the business on UK GDPR, the Data Protection Act 2018, and related data protection obligations, acting as the company's data protection point of contact, with scope to take on the in-house DPO role. Support compliance with NHS-specific frameworks, including the Data Security and Protection Toolkit (DSPT), NHS data access policies, and applicable NHS England guidance. Partner with product and engineering teams to understand Proximie's platform architecture and provide legally sound advice on data flows, AI model training, anonymisation, and IP ownership, producing supporting documentation as required. Support the business in meeting information security and compliance standards such as SOC 2 and ISO 27001. Develop and maintain contract templates, legal playbooks, and standard operating procedures to improve speed and consistency across the commercial function. Draft, review, and negotiate a broad range of commercial agreements, including SaaS contracts, data processing agreements, and partnership arrangements with NHS trusts and other healthcare organisations. Provide pragmatic, business-friendly advice on legal risk, helping the company move quickly while protecting its interests. Monitor and advise on relevant legislative and regulatory developments in healthcare technology, data protection, and AI. About You 3–6 years' post-qualifying experience (PQE) as a solicitor admitted in England and Wales, or equivalent in-house experience. Solid working knowledge of UK GDPR and data protection law, including practical experience advising on data processing agreements and cross-border transfer mechanisms, with the capability to take on the in-house data protection officer ("DPO") role. Experience working with or advising NHS or other public healthcare bodies, or a demonstrable understanding of the NHS contracting and regulatory environment. Either a technical background (e.g. a degree or prior career in computer science, engineering, or a related field), or a genuine enthusiasm and aptitude for understanding software architecture, AI systems, and data infrastructure. We will invest in helping you build this knowledge. Strong background in commercial contracting, ideally with SaaS, technology, or life sciences clients. Commercially astute, with the ability to identify what matters to the business and provide clear, actionable advice. Excellent written and verbal communication skills, with the confidence to engage directly with senior stakeholders and external counterparties. Desirable Experience with AI/ML-related legal issues, including training data, model outputs, and liability. Familiarity with public sector and NHS procurement frameworks (e.g. G-Cloud, NHS Shared Business Services). Prior in-house experience in a high-growth technology or healthtech environment. Knowledge of medical device regulation and clinical software compliance across both EU and UK regimes (EU MDR/IVDR, and UKCA marking under the UK MDR 2002). Why Work for Proximie? You will be encouraged to grow in your role, take ownership and gain responsibilities. Generous annual leave. Two “well-being” days per year plus the day off for your birthday. “Summer Fridays” – early office closing on Fridays during summer months. Annual bonus programme – based on individual contribution. To support your professional growth, all permanent employees will have access to an annual stipend of £1,000 to assist with personal development activities. Flexible working hours - we trust our people to manage their time and to focus on wider results. A flat organizational structure where every opinion matters, ideas are cultivated, and innovation is encouraged. Proximie is a truly global company with teams across the UK, Europe, United States, and the Middle East with that you will have opportunities to see the world. Proximie is an equal opportunity employer. We are committed to providing a work environment that supports, inspires, and respects all individuals. We do not discriminate on the basis of race, colour, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under the law. Department Legal Locations Proximie London Office Remote status Hybrid About Proximie What is Proximie? Proximie is on a mission to improve healthcare by transforming the world’s operating rooms into connected ecosystems of people, devices, and data. Our Intelligence Suite transforms operating room (OR) performance, keeping teams in sync and workflows on track to maximise throughput. Simultaneously our computer vision and AI capabilities capture real-time data and detect surgical events – improving quality of data outputs. The result: ORs are optimised like never before – with predictive analytics and automated notifications ensuring patients and staff are in the right place at the right time. Once practitioners are in the OR, our Surgical Suite enables real-time remote access and creates a secure video record of every procedure; improving training, education, and collaboration. It is an intuitive asset which helps instil a culture of continuous learning, accelerates the adoption of cutting-edge medical devices, and enhances surgical performance across the entire global workforce – improving outcomes and saving lives. Proximie was commercialised in 2019 and is available in over 500 facilities globally. Founded in 2016 Co-workers 110