Compliance Lead

Role:- Compliance Lead – Quality and Governance

Location:  Hyderabad

Reports to: Quality and Governance Manager

Working with:
Director of Operations, Clinical Director, Head of Operations, Quality & Governance Team, IT Services Company, Data Protection Officer (DPO), Reporters and Reporter Recruitment Team, Clinical Leads, Service Delivery Team.

Introduction:

Apollo Radiology International (ARI) is a global leader in teleradiology services, committed to delivering safe, high-quality, and compliant reporting across the UK and international markets. The Compliance Manager plays a critical role in ensuring ARI achieves and maintains accreditation to international quality and information security standards, while also overseeing regulatory compliance for radiologists and internal operations.

This role requires a proactive, detail-oriented individual with strong knowledge of compliance frameworks and excellent organisational skills. The successful candidate will be a key driver of ARI's compliance agenda, ensuring our operations meet the highest standards of governance, safety, and regulatory assurance.

What you will do:

Accreditation Management

· Lead ARI's accreditation and reassessment processes for ISO 27001, ISO 9001, ISO 14001, and Cyber Essentials Plus.

· Coordinate internal teams, IT service providers, and external auditors to ensure all requirements are fully met.

· Develop, maintain, and review compliance policies, SOPs, and evidence documentation required for audits.

Documentation & Policy Control

· Maintain key governance documentation, including IT Access Policy, BYOD Policy, and related information security policies.

· Maintain up-to-date IT equipment lists, tracking ARI-issued devices and BYODs, including OS versions and compliance status.

· Ensure accurate and secure storage of compliance records.

Cyber Essentials Oversight

Monitor and Audit that the IT services company has:

· Implemented and maintained firewall, network, and configuration controls in line with Cyber Essentials requirements, including default credential management and regular firewall reviews.

· Applied patch management and software updates, ensuring all devices run supported versions and are updated within required timeframes.

· Maintain evidence that these activities are being completed and reported, escalating gaps or risks to the Quality & Governance Manager.

· Data Protection & Risk Support

· Support the DPO and Governance Manager in drafting and updating DPIAs, risk assessments, and compliance registers.

· Contribute to continuous improvement initiatives related to information security and data governance.

· Liaise with ARI's IT provider to ensure ongoing compliance with Cyber Essentials and other cyber security frameworks.

· Ensure IT systems, processes, and data handling procedures align with accreditation and NHS standards.

· Oversee evidence gathering and ensure timely completion of cyber audits.

· Escalate cyber-related risks, incidents, or breaches to leadership and ensure mitigation actions are followed through.

Reporter Compliance Management

· Oversee onboarding and compliance for radiologists, ensuring all mandatory documentation is complete (e.g., Indemnity certificates, DBS certificates, appraisals, references, right-to-work, training records).

· Monitor and track mandatory training compliance for all reporters, escalating issues where needed.

· Liaise with the Recruitment & Engagement Team to collect, verify, and update radiologist compliance documentation.

Governance Support

· Provide compliance reporting to the Quality & Governance Manager for governance meetings.

· Support internal audits, spot checks, and QA activities related to compliance.

· Escalate risks and non-compliance promptly, ensuring mitigation plans are in place.

What people see in you:

· Excellent at word-processing and producing professional documents.

· A clear and effective communicator, both verbally and in writing.

· Someone who takes pride in accuracy and consistency.

· A proactive, solutions-oriented compliance professional who takes ownership.

· Highly organised with exceptional attention to detail.

· A clear communicator, able to engage confidently with both internal colleagues, IT partners, and external auditors.

· Calm under pressure, able to deliver to deadlines and instil confidence in ARI's compliance standards.

· A collaborative team player who contributes to a culture of safety, integrity, and continuous improvement.

Job Requirements

Qualifications / Experience:

• Proven experience in compliance, governance, or quality assurance, ideally within healthcare or IT services.
• Knowledge of ISO 27001, ISO 9001, ISO 14001 frameworks and Cyber Essentials Plus.
• Strong documentation, auditing, and policy writing skills.
• Proficiency in Microsoft Office and SharePoint.

Skills & Competencies:

Essential:

· Excellent organisational skills with the ability to prioritise tasks.

· Strong attention to detail and accuracy in written work.

· Advanced word-processing and document formatting skills.

· Ability to maintain confidentiality and handle sensitive information.

· Proactive and adaptable, with a willingness to learn.

• Flexible and adaptable, with the ability to multitask in a busy environment.

Desirable:

• Experience with GDPR, data protection, and DPIA processes.
• Familiarity with healthcare compliance (e.g., radiologist onboarding, training compliance).
• Prior experience in achieving and maintaining accreditations.

Working Conditions

· Office-based with the option of hybrid working depending on business needs.

· Ability to work under pressure and to deadlines.

· Commitment to uphold ARI values of safety, quality, integrity, and continuous improvement.