Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 11 hours ago

Principal Information Security & Data Protection Officer

Unmind2 open roles

Pay
£92,000 – £115,000 a year
Where
London, HQ
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowPrincipal Information Security & Data Protection OfficerUnmind · London, HQ

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Unmind's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Unmind postings stay open a median of 2 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: posted 11 hours ago

Unmind median: 2 days open

The posting

Location: UK Based, Remote-first (with monthly travel to London)

At Unmind, we're here to create better mental health.

We believe mental health should be a source of strength, not struggle – for people, teams, and entire organisations.

We combine science, technology, and human care to help companies like Uber, Disney, Major League Baseball, and the NHS improve mental health and drive performance.

Now we’re looking for more brilliant people to help us do it.

🚀 Our Values

We’re building a company where ambition and empathy go hand in hand.

Outpace the rest – Move fast. Deliver excellence.

Stronger together – We go further, faster, together.

Client first – We win, when our clients win.

🌈 Inclusion & Belonging

We’re building a place where everyone feels seen, heard, and supported – and where difference is celebrated.

If you need adjustments during the process, tell us when you apply or email [email protected].

Learn more about how we hire and our commitment to equity in our Candidate FAQ → https://unmind.notion.site/Unmind-Candidate-FAQs-b2f30c27bc57453b8edaee099aad4596

🎯 THE ROLE — PRINCIPAL INFORMATION SECURITY & DATA PROTECTION OFFICER

Working closely with Commercial, Engineering, Product and Legal to lead Unmind's Information Security and Data Protection programmes and act as Unmind's designated Data Protection Officer (DPO). We process health information at scale, so trust is central to what we offer. We're looking for a hands-on, senior individual contributor who can own both disciplines end to end and give the business clear, practical advice.

This role sets security and privacy requirements, advises and assures.

Overall responsibility for;

Information Security

- the management of Information Security within the business;

- maintaining ISO 27001:2022 and Cyber Essentials certification, chairing the ISMS Board and running the ISMS day to day – policies, risk management, controls, evidence and internal audits;

- liaising with Engineering, Product and Data & AI on information security threats and vulnerabilities and recommending mitigations;

- Information Security incident management and remediation;

- managing the Application and Infrastructure penetration testing and vulnerability management process, tracking findings to closure;

- leading AI governance operations, including the AI policy and register, AI use-case risk reviews and readiness for ISO 42001;

- managing the Information Security pre-sales, RFP and contractual process, and keeping trust materials in Conveyor current;

- managing the business's security education and awareness training programme;

- reporting information security compliance and risk to ELT and the Board.

Data Protection Officer

- performing the statutory duties of the DPO under UK and EU GDPR, including acting as the contact point for the ICO and other data protection authorities;

- maintaining Unmind's privacy framework, including privacy notices and retention;

- advising on privacy for new products, suppliers and AI use cases, including coordinating DPIAs;

- managing data subject rights requests and personal data breach assessments;

- leading privacy review of DPAs and client assurance with Legal and Commercial, and reporting data protection risk to ELT and the Board.

🌟 ABOUT YOU

We know great people come from all sorts of backgrounds, and we want to make sure we’re focusing on what really matters. We welcome applications from people with different experiences and perspectives, while recognising that certain qualifications are essential for this role. You’ll find these outlined below.

ESSENTIAL:

- Experience of implementing and maintaining ISO 27001 certification within a global technology business;

- Expert practical knowledge of UK and EU GDPR, including DPIAs, rights requests, personal data breaches, and international transfers;

- Experience acting as, or working closely alongside, a Data Protection Officer;

- Confident client-facing presence, able to explain Unmind's data security and privacy approach clearly to prospective and existing clients;

- Experience advising engineering and product teams on mitigation solutions for application and infrastructure security risks;

- Sound understanding of AI-related security and privacy risks;

- Ability to give clear, independent advice and challenge to senior leaders;

- Commitment and attention to detail;

- Able to manage multiple competing requests across the business, prioritising by risk and deadline;

- Excellent verbal and written communication skills;

- Credible and behaves with the highest levels of integrity.

DESIRED:

- Experience with health or other special category data, or digital wellbeing products;

- Experience in a high growth business environment;

- Familiarity with ISO 27701 and ISO 42001;

- A recognised security or privacy certification (such as CISSP, CISM, CIPP/E or CIPM), or equivalent practical experience.

Tip for candidates: If you’re unsure whether to apply – do. We know great people don't always tick every box.

💚 LIFE AT UNMIND

We believe wellbeing and performance go hand-in-hand – and we build our environment to support both.

A few highlights:

✅ Private medical for you & your family

✅ Equity in Unmind

✅ Generous gender-neutral parental leave

✅ 25 days holiday + birthday + celebration days

✅ Revive & Thrive Days – company-wide Friday off monthly

✅ Flexible working + early Friday summers

✅ Remote-first within the UK, with monthly in-person meet-ups and access to a London co-working space

✅ Annual learning budget + learning leave

✅ Free weekly therapy or coaching sessions

✅ Wellbeing support via WellHub & Bippit

See all benefits on our Careers Page → https://unmind.com/unmind-careers

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Unmind's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Unmind's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Unmind's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.