---
title: 'Principal Information Security & Data Protection Officer at Unmind'
canonical: 'https://feeny.ai/job/principal-information-security-data-protection-officer-unmind-london-dcqa97bqv2nw'
type: 'job'
last_seen: '2026-10-29'
---

# Principal Information Security & Data Protection Officer at Unmind

- **Company:** Unmind
- **Location:** London, United Kingdom
- **Compensation:** £92k–£115k
- **Employment:** full-time
- **Posted:** 2026-10-27
- **Last confirmed live:** 2026-10-29
- **Apply:** https://jobs.ashbyhq.com/unmind/2b90cf02-41e6-41b5-83cc-3a22a5c4531d

## Job description

Location: UK Based, Remote-first (with monthly travel to London)

At Unmind, we're here to create better mental health. We believe mental health should be a source of strength, not struggle – for people, teams, and entire organisations. We combine science, technology, and human care to help companies like Uber, Disney, Major League Baseball, and the NHS improve mental health and drive performance. Now we’re looking for more brilliant people to help us do it.

🚀 Our Values We’re building a company where ambition and empathy go hand in hand. Outpace the rest – Move fast. Deliver excellence. Stronger together – We go further, faster, together. Client first – We win, when our clients win.

🌈 Inclusion & Belonging We’re building a place where everyone feels seen, heard, and supported – and where difference is celebrated. If you need adjustments during the process, tell us when you apply or email talent@unmind.com. Learn more about how we hire and our commitment to equity in our [Candidate FAQ →](https://unmind.notion.site/Unmind-Candidate-FAQs-b2f30c27bc57453b8edaee099aad4596)

🎯 The Role — Principal Information Security & Data Protection Officer Working closely with Commercial, Engineering, Product and Legal to lead Unmind's Information Security and Data Protection programmes and act as Unmind's designated Data Protection Officer (DPO). We process health information at scale, so trust is central to what we offer. We're looking for a hands-on, senior individual contributor who can own both disciplines end to end and give the business clear, practical advice. This role sets security and privacy requirements, advises and assures. Overall responsibility for; Information Security

- the management of Information Security within the business;
- maintaining ISO 27001:2022 and Cyber Essentials certification, chairing the ISMS Board and running the ISMS day to day – policies, risk management, controls, evidence and internal audits;
- liaising with Engineering, Product and Data & AI on information security threats and vulnerabilities and recommending mitigations;
- Information Security incident management and remediation;
- managing the Application and Infrastructure penetration testing and vulnerability management process, tracking findings to closure;
- leading AI governance operations, including the AI policy and register, AI use-case risk reviews and readiness for ISO 42001;
- managing the Information Security pre-sales, RFP and contractual process, and keeping trust materials in Conveyor current;
- managing the business's security education and awareness training programme;
- reporting information security compliance and risk to ELT and the Board.

Data Protection Officer

- performing the statutory duties of the DPO under UK and EU GDPR, including acting as the contact point for the ICO and other data protection authorities;
- maintaining Unmind's privacy framework, including privacy notices and retention;
- advising on privacy for new products, suppliers and AI use cases, including coordinating DPIAs;
- managing data subject rights requests and personal data breach assessments;
- leading privacy review of DPAs and client assurance with Legal and Commercial, and reporting data protection risk to ELT and the Board.

🌟 About You We know great people come from all sorts of backgrounds, and we want to make sure we’re focusing on what really matters. We welcome applications from people with different experiences and perspectives, while recognising that certain qualifications are essential for this role. You’ll find these outlined below.

## ESSENTIAL:

- Experience of implementing and maintaining ISO 27001 certification within a global technology business;
- Expert practical knowledge of UK and EU GDPR, including DPIAs, rights requests, personal data breaches, and international transfers;
- Experience acting as, or working closely alongside, a Data Protection Officer;
- Confident client-facing presence, able to explain Unmind's data security and privacy approach clearly to prospective and existing clients;
- Experience advising engineering and product teams on mitigation solutions for application and infrastructure security risks;
- Sound understanding of AI-related security and privacy risks;
- Ability to give clear, independent advice and challenge to senior leaders;
- Commitment and attention to detail;
- Able to manage multiple competing requests across the business, prioritising by risk and deadline;
- Excellent verbal and written communication skills;
- Credible and behaves with the highest levels of integrity.

## DESIRED:

- Experience with health or other special category data, or digital wellbeing products;
- Experience in a high growth business environment;
- Familiarity with ISO 27701 and ISO 42001;
- A recognised security or privacy certification (such as CISSP, CISM, CIPP/E or CIPM), or equivalent practical experience.

Tip for candidates: If you’re unsure whether to apply – do. We know great people don't always tick every box.

💚 Life at Unmind We believe wellbeing and performance go hand-in-hand – and we build our environment to support both. A few highlights: ✅ Private medical for you & your family ✅ Equity in Unmind ✅ Generous gender-neutral parental leave ✅ 25 days holiday + birthday + celebration days ✅ Revive & Thrive Days – company-wide Friday off monthly ✅ Flexible working + early Friday summers ✅ Remote-first within the UK, with monthly in-person meet-ups and access to a London co-working space ✅ Annual learning budget + learning leave ✅ Free weekly therapy or coaching sessions ✅ Wellbeing support via WellHub & Bippit See all benefits on our [Careers Page →](https://unmind.com/unmind-careers)

## About Unmind

## Company Overview
- **One-liner**: Unmind provides a comprehensive workplace mental health platform that combines therapy, coaching, AI, and expert insights to help organizations build resilient teams and sustainable performance cultures.
- **Entity Type**: Private (total funding of $124.1M across 7 rounds)
- **Headquarters**: London, United Kingdom (with offices in New York, USA and Sydney, Australia)
- **Founded**: 2016
- **Founders**: Dr. Nick Taylor (Clinical Psychologist) and Steve Peralta (Corporate Wellbeing Practitioner & Executive Coach)

## Core Business
- **Primary Industry**: Workplace Mental Health Care / Employee Wellbeing
- **Target Customers**: B2B – Enterprise organizations (serves over 3 million employees across 140+ countries)
- **Mission**: To make better mental health a reality by shifting from reactive crisis care to proactive, science-backed support that drives both wellbeing and business performance.

## Products & Services
- **Therapy & Coaching**: Easy access to a global network of 90,000+ qualified therapists and coaches for one-on-one support.
- **Content & Courses**: Short, practical learning modules grounded in psychology to help people feel and perform better daily.
- **Manager Training**: Accredited training that equips leaders to support their teams’ mental health with confidence.
- **Insights & Assessments**: Anonymised data and analytics to help organizations understand wellbeing trends and measure impact.
- **Nova (AI Support)**: Always-on, AI-powered guidance with built-in clinical safeguards for proactive, preventative care.
- **24/7 Global Helpline & Immediate Support**: Immediate human crisis support available anytime, anywhere.
- **Rapid Response Critical Incident Coverage**: Expert-led care for serious or unexpected events.
- **Work/Life Practical Support**: Help with life pressures (money, family, legal) to keep employees focused and present.

## Market Standing
- **Valuation / Market Cap**: Not publicly disclosed
- **Key Metric**: Annual Revenue of GBP 6.2M (latest available); Total Funding of $124.1M
- **Notable Investors / Partners**: Clients include Uber, Disney, Major League Baseball (MLB), Nationwide, Standard Chartered, British Airways, and the NHS. Specific lead investors for funding rounds not detailed in available sources.
- **Growth Signals**: 159 employees (+3% YoY); operates in 36 countries; active job postings up 400% quarterly; serves over 3 million employees globally.

## Competitive Advantages
- **Proactive approach**: Focuses on prevention before crisis, differentiating from traditional reactive EAPs.
- **Science-backed**: All offerings grounded in clinical psychology and evidence, with measurable outcomes (up to 40% improvement in mood, 16.5% boost in productivity, $4.60 ROI per $1 spent).
- **Complete ecosystem**: Integrates therapy, coaching, AI, training, analytics, and crisis support in one platform, making it easy for leaders to manage wellbeing strategically.
- **Global scale**: Network of 90,000+ practitioners and support in 140+ countries, with culturally competent care.

## Strategic Focus
- **AI and data-driven innovation**: Developing AI tools (Nova) and leveraging data insights to deliver smarter, faster, and more personalized care.
- **Scaling enterprise impact**: Expanding partnerships with large global brands and deepening integration with business strategy.
- **Prevention over cure**: Continuing to shift the market from reactive mental health support to proactive, performance-enhancing wellbeing.

## Why Work Here
- **Culture & Values**: Emphasis on “Stronger together,” “Client first,” “Outpace the rest” – collaborative, no-ego environment with honest communication and accountability for client outcomes.
- **Inclusion & Belonging**: Commitment to equitable hiring, open conversations, and continuous learning; adjustments available during hiring process.
- **Benefits**: 25 vacation days, birthday off, summer Fridays (3pm finish June–August in UK/US, Dec–Feb in AUS), flexible public holidays, six months parental leave for primary carers (three for secondary), private medical insurance, life insurance (2x salary), pension plan (4% employee + 3% employer + 1% government), cycle to work scheme, eye care allowance (£50/year), dog-friendly UK offices, access to Unmind platform + 6 free passes for loved ones, Unmind Talk (free weekly therapy/coaching sessions), celebration days (2 extra days per year).
- **Work Model**: Hybrid/office – offices in London, New York, and Sydney; dog-friendly environment.
- **Growth**: Fast-growing company with increasing headcount and job openings, offering opportunities to shape the future of workplace wellbeing.

## Sources
1. [unmind.com – About Us](https://unmind.com/about-us)
2. [unmind.com – Careers](https://unmind.com/unmind-careers)
3. [unmind.com – Homepage](https://unmind.com/)
4. [linkedin.com – Unmind Company Page](https://www.linkedin.com/company/unmindhq)
5. [cbinsights.com – Unmind Profile](https://www.cbinsights.com/company/unmind)

## Other roles at Unmind

- [Technical Lead](https://feeny.ai/job/technical-lead-unmind-london-55fjh8e5qq7x) — London, United Kingdom