Senior Privacy Counsel at HeliosX

London, England, United Kingdom -

Full Time

Start Date

Immediate

Expiry Date

31 May, 26

Salary

0.0

Posted On

02 Mar, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Privacy Strategy, Data Protection, Health Data, Privacy-by-Design, Regulatory Strategy, Risk Management, Data Mapping, DPIAs, Privacy Policies, Regulatory Engagement, AI Governance, Data Commercialisation, International Expansion, Contract Negotiation, Vendor Assessment, Team Leadership

Industry

Hospitals and Health Care

Description

Ready to revolutionize healthcare, making it faster and more accessible than ever before? How we started: Founded in 2013 by Dwayne D’Souza, HeliosX was built on a simple but powerful idea: healthcare should be easier to access, faster to receive, and centred around the individual. From day one, we’ve grown without external funding; scaling profitably through technology, disciplined execution, and deep medical expertise. What started as a challenger idea has become one of the most significant healthcare platforms operating globally today. Where we are now: We’ve earned the trust of millions of people worldwide through category-leading products and well-known brands, including MedExpress, Dermatica, ZipHealth, RocketRX, and Levity. A key driver of our success is vertical integration; we operate our own manufacturing and proprietary products, led by in-house medical teams, researchers, and pharmacists at the top of their fields. In 2025, HeliosX treated more than 1.7 million patients globally and reached £781m in revenue, representing +337% year-on-year growth and cementing our position as the clear market leader in the UK. That growth translates into real-world outcomes: our weight-loss treatments helped patients lose 8.5 million kilograms of excess weight in 2025 alone, contributing to an estimated 1,300 fewer cardiac events. This is growth with measurable, life-changing impact at scale. Today, we operate across four international markets, with successful launches in Germany and Canada and continued expansion in the US. We were also recently recognised in the Sunday Times Top 100 fastest-growing tech companies, further validation of both our momentum and our ambition. Where we’re going: 2026 is a step-change year. Our ambition is to reach £1.6bn in revenue, expand from four to eight global markets and significantly broaden our condition and treatment portfolio. Over the coming years, you’ll help shape HeliosX into a truly world-leading healthcare partner; one that combines scale, speed, and clinical rigour to redefine how personalised care is delivered. Joining HeliosX now means building systems, teams, and products that will define the next decade of digital healthcare, and doing work that genuinely improves lives, at global scale. There’s never been a more exciting time to join HeliosX. Come be a part of making our dream of easier and faster healthcare a reality! About the role: HeliosX is seeking a Senior Privacy Counsel to own and lead global privacy and data protection across the organisation. Reporting to the Head of Legal, this role will set and drive the company’s privacy strategy, embed privacy-by-design across products and operations, and enable compliant, scalable use of data (including health data) to support innovation, international expansion and responsible commercialisation.This is a high-impact, senior legal role with significant autonomy and visibility. The Senior Privacy Counsel will act as the senior internal authority on privacy and data protection, taking primary ownership of privacy risk decisions within an agreed risk appetite and escalation framework with the Head of Legal. The role will work closely with different stakeholders in the business helping to scale our datasets as a commercial asset. The role focuses on legal privacy and regulatory strategy and risk. Day-to-day information security operations and non-legal compliance execution sit with the relevant functional owners, with strong partnership and governance across these teams. Privacy and data protection are central to HeliosX’s growth, product strategy and regulatory credibility. This role is critical in enabling the business to scale internationally, innovate responsibly and manage regulatory, reputational and enforcement risk in a highly scrutinised environment. What you'll be doing: Own and lead the organisation’s global privacy and data protection strategy, including the use of special category (health) data. Act as the final internal decision-maker on privacy and data protection matters within agreed risk appetite, providing clear, pragmatic direction to the business and the Head of Legal. Partner with and advise the Head of Legal on cross-functional and board-level risk trade-offs where privacy intersects with broader legal, regulatory or commercial considerations. Design, implement and continuously improve scalable privacy governance, including oversight of: data mapping / RoPA DPIAs and privacy risk assessments internal privacy policies and standards training and awareness programmes Building and scaling datasets as a commercial asset privacy incident escalation and reporting Establish privacy KPIs and reporting for senior leadership. Lead engagement with data protection authorities and regulators, including managing responses to inquiries, data incidents, investigations, audits and formal correspondence, working with external counsel where appropriate. Monitor and advise on privacy regulatory developments across relevant jurisdictions (including UK, EU, US and other international markets) and incorporate the impact of further expansion on the global privacy program and data strategy. Partner closely with product, engineering and data teams to embed privacy-by-design into product development, experimentation, analytics and growth initiatives. Lead on privacy and data protection aspects of AI and automated decision-making, including DPIAs, lawful basis, transparency, data minimisation, governance and human oversight. Support responsible data use and data commercialisation initiatives in a way that balances innovation with regulatory and ethical considerations. Own privacy readiness for international expansion, including market-entry assessments, localisation considerations and cross-border data transfer strategies. Draft, review and negotiate data-related agreements, including DPAs, joint controller arrangements and data-sharing agreements. Lead privacy input into partner and vendor assessments. Build and lead a small but growing privacy function (legal and/or privacy professionals), setting priorities, mentoring team members and establishing effective operating rhythms. Who you are: Experience: Qualified lawyer (UK / EU preferred). 8+ years PQE (or equivalent experience) with deep, hands-on privacy expertise in-house and/or in leading private practice. Proven experience owning privacy strategy and decision-making in a regulated, high-growth and data-intensive environment. Expert knowledge of UK GDPR and EU GDPR, including advising on the use of special category data. Experience with other regimes (e.g. the Americas or APAC) is advantageous. Demonstrable experience influencing and advising senior stakeholders across product, engineering, data, commercial and clinical teams. Deep understanding of privacy risks and controls in modern digital products and advanced analytics in a direct to consumer business. Excellent drafting, negotiation and communication skills, with the ability to translate complex privacy issues into clear and actionable guidance. Experience working in or advising a healthtech, digital health or consumer healthcare business or any other sector handling special category data would be preferred. Experience building or scaling a privacy function within a fast-paced, high-growth organisation. Exposure to privacy considerations in international market expansion, including outside the UK/EU. Familiarity with data ethics frameworks and responsible innovation best practices. Why work with us? At HeliosX, we want to improve healthcare for everyone, and to do this we need a team of brilliant people who share that ambition. We are currently a diverse team of engineers, scientists, clinical researchers, physicians, pharmacists, marketeers, and customer care specialists committed to our mission - but we need more talented folks to join us, if we want to achieve our global ambitions! Aside from working with our all-star team, here are the other benefits of coming on board: Generous equity allocations with significant upside potential 25 Days Holiday (+ all the usual Bank Holidays) Private health insurance, along with extra dental and eye care cover Employee Pension with Smart Pension Enhanced parental leave Cycle-to-work Scheme Electric Car Scheme Free Dermatica and MedExpress products every month, as well as family discounts Home office allowance Access to a Headspace subscription, discounted gym memberships, and a learning and development budget #LI-Senior #LI-Hybrid

Responsibilities

This senior role involves owning and leading the organization's global privacy and data protection strategy, including setting direction for the use of special category health data. The counsel will act as the senior internal authority on privacy risk decisions, partnering with stakeholders to scale datasets responsibly while embedding privacy-by-design across products and operations.