Compliance and Regulatory Associate

Limbic

Compliance and Regulatory Associate providing hands-on support in information security and regulatory functions. Collaborating within the compliance team to ensure adherence to quality standards.

Posted 6/24/2026full-time🇬🇧 United KingdomJuniorMid-LevelWebsite

About the role

Key responsibilities & impact

Support the maintenance of our ISO 27001 ISMS by updating policies, procedures, and control evidence, and helping prepare for internal and external audits.
Assist with data protection administration: maintaining records of processing activities, supporting data subject access requests, and tracking compliance obligations under UK GDPR and relevant US frameworks including HIPAA.
Coordinate security testing activity, working with the InfoSec Lead to scope, schedule, and track penetration testing and vulnerability assessments, and following up on remediation actions.
Support supplier and vendor management: processing third-party security assessments, maintaining the vendor risk register, and chasing outstanding responses.
Manage security-related onboarding and offboarding processes, including access control reviews and checklist completion.
Maintain the security incident register, support initial triage and documentation of incidents, and track CAPAs through to closure.
Prepare responses to customer security questionnaires and assurance requests for external partners
Own the administrative chasing layer: tracking outstanding sign-offs, forms, training acknowledgements, and evidence requests across the business.
Support QMS documentation under ISO 13485 by maintaining and updating SOPs, work instructions, and quality records, and assisting with audit evidence preparation.
Assist with complaint and CAPA tracking: logging complaints and adverse events, monitoring closure timelines, and supporting documentation of corrective and preventive actions.
Support change control administration: preparing and tracking change request documentation across product and process changes.
Assist with regulatory filing and technical file maintenance for UK and US medical device requirements, including UK MDR 2002 and FDA SaMD guidance.
Provide documentation support for new product introductions.
Support QMS supplier qualification processes and documentation.
Help coordinate and track evidence for ISO 27001 and ISO 13485 internal and external audits, including liaising with Engineering, Product, and Operations teams.
Support the wider company's transition into compliant operations by helping communicate new processes, coordinate training, and embed controls across functions.
Assist with identifying opportunities to reduce manual overhead through process improvement and workflow automation, as capacity allows.

Requirements

What you’ll need

1–2 years of experience in an information security, compliance, or data protection role, ideally within a healthcare, health technology, or other regulated environment.
Working knowledge of ISO 27001 and/or GDPR / UK GDPR, gained through practical experience or formal study.
Exposure to healthcare data environments, including an understanding of the sensitivity and regulatory obligations around health information (HIPAA familiarity is a plus).
Strong organisational skills: able to manage multiple ongoing workstreams, track outstanding actions, and follow up persistently without losing detail.
Methodical and documentation-oriented: comfortable producing and maintaining accurate compliance records, evidence packs, and audit trails.
Clear communicator, able to chase colleagues for information and sign-offs professionally and effectively.
Familiarity with ISO 13485 or quality management systems, either through direct experience or study.
Experience with medical device software regulation (UK MDR, FDA SaMD) or willingness to build this knowledge quickly.
Exposure to supplier risk management or third-party security assessments.
Experience working with US and UK regulatory frameworks simultaneously.
Experience with compliance tooling or workflow automation.

Benefits

Comp & perks

Competitive salary and equity share options.
25 days PTO plus bank holidays.
Company pension scheme (UK).
Enhanced parental leave packages (UK).
Support with purchasing work-related books and materials.
Quarterly Life Days: Enjoy 4 paid days off per year (one each quarter) to use whenever you choose to relax, recharge, or take care of personal matters.
Mental Health Support: Access to dedicated mental health support services.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

ISO 27001GDPRUK GDPRHIPAAISO 13485UK MDR 2002FDA SaMDcompliance documentationsecurity assessmentsworkflow automation

Soft Skills

organizational skillsmethodicaldocumentation-orientedclear communicatorattention to detailfollow-upprocess improvementcollaborationproblem-solvingtime management