Senior Privacy Counsel

Ready to revolutionize healthcare making it faster and more accessible than ever before

How we started:

Founded in 2013 by Dwayne DSouzaHeliosXwas built on a simple but powerful idea: healthcare should be easier to access faster to receive and centred around the individual. From day one weve grown without external funding; scaling profitably through technology disciplined execution and deep medical expertise. What started as a challenger idea has become one of the most significant healthcare platforms operating globally today.

Where we are now:

Weve earned the trust of millions of people worldwide through category-leading products and well-known brands including MedExpress Dermatica ZipHealth RocketRX and Levity. A key driver of our success is vertical integration; we operate our own manufacturing and proprietary products led by in-house medical teams researchers and pharmacists at the top of their fields.

In 2025 HeliosX treated more than 1.7 million patients globally and reached 781m in revenue representing 337% year-on-year growth and cementing our position as the clear market leader in the UK. That growth translates into real-world outcomes: our weight-loss treatments helped patients lose 8.5 million kilograms of excess weight in 2025 alone contributing to an estimated 1300 fewer cardiac events. This is growth with measurable life-changing impact at scale.

Today we operate across four international markets with successful launches in Germany and Canada and continued expansion in the US. We were also recently recognised in the Sunday Times Top 100 fastest-growing tech companies further validation of both our momentum and our ambition.

Where were going:

2026 is a step-change year. Our ambition is to reach 1.6bn in revenue expand from four to eight global markets and significantly broaden our condition and treatment portfolio. Over the coming years youll help shape HeliosX into a truly world-leading healthcare partner; one that combines scale speed and clinical rigour to redefine how personalised care is delivered. Joining HeliosX now means building systems teams and products that will define the next decade of digital healthcare and doing work that genuinely improves lives at global scale.

Theres never been a more exciting time to join HeliosX. Come be a part of making our dream of easier and faster healthcare a reality!

About the role:

HeliosX is seeking a Senior Privacy Counsel to own and lead global privacy and data protection across the organisation. Reporting to the General Counsel this role will set and drive the companys privacy strategy embed privacy-by-design across products and operations and enable compliant scalable use of data (including health data) to support innovation international expansion and responsible is a high-impact senior legal role with significant autonomy and visibility.

The role focuses on legal privacy and regulatory strategy and risk. Day-to-day information security operations and non-legal compliance execution sit with the relevant functional owners with strong partnership and governance across these teams. Privacy and data protection are central to HeliosXs growth product strategy and regulatory credibility. This role is critical in enabling the business to scale internationally innovate responsibly and manage regulatory reputational and enforcement risk in a highly scrutinised environment.

What youll be doing:

• Own and lead the organisations global privacy and data protection strategy including the use of special category (health) data.
• Act as the final internal decision-maker on privacy and data protection matters within agreed risk appetite providing clear pragmatic direction to the business and the Head of Legal.
• Partner with and advise the Head of Legal on cross-functional and board-level risk trade-offs where privacy intersects with broader legal regulatory or commercial considerations.
• Design implement and continuously improve scalable privacy governance including oversight of:
• data mapping / RoPA
• DPIAs and privacy risk assessments
• internal privacy policies and standards
• training and awareness programmes
• Building and scaling datasets as a commercial asset
• privacy incident escalation and reporting
  
  
• Establish privacy KPIs and reporting for senior leadership.
• Lead engagement with data protection authorities and regulators including managing responses to inquiries data incidents investigations audits and formal correspondence working with external counsel where appropriate.
• Monitor and advise on privacy regulatory developments across relevant jurisdictions (including UK EU US and other international markets) and incorporate the impact of further expansion on the global privacy program and data strategy.
• Partner closely with product engineering and data teams to embed privacy-by-design into product development experimentation analytics and growth initiatives.
• Lead on privacy and data protection aspects of AI and automated decision-making including DPIAs lawful basis transparency data minimisation governance and human oversight.
• Support responsible data use and data commercialisation initiatives in a way that balances innovation with regulatory and ethical considerations.
• Own privacy readiness for international expansion including market-entry assessments localisation considerations and cross-border data transfer strategies.
• Draft review and negotiate data-related agreements including DPAs joint controller arrangements and data-sharing agreements.
• Lead privacy input into partner and vendor assessments.
• Build and lead a small but growing privacy function (legal and/or privacy professionals) setting priorities mentoring team members and establishing effective operating rhythms.

Who you are:

Experience:

• Qualified lawyer (UK / EU preferred).
• 8 years PQE (or equivalent experience) with deep hands-on privacy expertise in-house and/or in leading private practice.
• Proven experience owning privacy strategy and decision-making in a regulated high-growth and data-intensive environment.
• Expert knowledge of UK GDPR and EU GDPR including advising on the use of special category data. Experience with other regimes (e.g. the Americas or APAC) is advantageous.
• Demonstrable experience influencing and advising senior stakeholders across product engineering data commercial and clinical teams.
• Deep understanding of privacy risks and controls in modern digital products and advanced analytics in a direct to consumer business.
• Excellent drafting negotiation and communication skills with the ability to translate complex privacy issues into clear and actionable guidance.
• Experience working in or advising a healthtech digital health or consumer healthcare business or any other sector handling special category data would be preferred.
• Experience building or scaling a privacy function within a fast-paced high-growth organisation.
• Exposure to privacy considerations in international market expansion including outside the UK/EU.
• Familiarity with data ethics frameworks and responsible innovation best practices.

Why work with us

At HeliosX we want to improve healthcare for everyone and to do this we need a team of brilliant people who share that ambition. We are currently a diverse team of engineers scientists clinical researchers physicians pharmacists marketeers and customer care specialists committed to our mission - but we need more talented folks to join us if we want to achieve our global ambitions!

Aside from working with our all-star team here are the other benefits of coming on board:

• Generous equity allocations with significant upside potential
• 25 Days Holiday ( all the usual Bank Holidays)
• Private health insurance along with extra dental and eye care cover
• Employee Pension with Smart Pension
• Enhanced parental leave
• Cycle-to-work Scheme
• Electric Car Scheme
• Free Dermatica and MedExpress products every month as well as family discounts
• Home office allowance
• Access to a Headspace subscription discounted gym memberships and a learning and development budget

#LI-Senior #LI-Hybrid