Quality & Regulatory Affairs Manager

At Heim,  we are reinventing how healthcare is accessed, and creating technology to make home the default place for care. 

We believe that healthcare is best delivered in the home of patients, and that we are at the cusp of a systemic shift away from hospital based care. 

We are creating the AI Native Operating System to power community health. Heim On-demand gives access to on-demand community nursing services to people who need them, and Heim Software is the AI-native OS platform that lets community organisations run their own services with the same level of efficiency, intelligence, and ease that we use ourselves. This role indexes heavily towards Heim Software and is responsible for ensuring our technology is at the forefront of regulation for AISaMD and other relevant accreditations. 

We are CQC registered and ISO 27001 accredited. We are already on our journey to class I MDR and aim to have this filed in the coming months. Our next step is MDR II.

We are hiring our first Quality & Regulatory Affairs Manager to own how Heim builds safe, compliant and trusted products. Heim Software is moving to UKCA Class I and then Class II as our AI capabilities grow from operational to increasingly clinical decision support and automation. 

You will own our quality management system, our regulatory route to market, and the information governance every NHS partner needs before go-live. You will act as Heim's Quality Manager and Data Protection Officer. You will bring this work in-house from our current external support and build a function that lets us ship fast and stay safe.

You are accountable for three outcomes:

• →

  Define regulatory strategy for Heim’s upcoming MDR filings (Classification, intended use, claims) 

• →

  Act as Quality Manager: own and run our ISO 13485 quality management system

• →

  Own risk management (ISO 14971), the software lifecycle (IEC 62304) and usability (IEC 62366) with Product and Engineering

• →

  Own the development of the technical documentation for our upcoming Class I and Class II devices including:

  • →

    Clinical Evaluation (CEP / CER)

  • →

    Risk Management File (ISO 14971 aligned)

  • →

    Software lifecycle documentation (as applicable) 

• →

  Own the UKCA registration and approved body process for Class II 

• →

  Design and run post-market surveillance and post-market validation studies, working with our clinical and data teams

• →

  Set up change control for AI features, so model updates move quickly without breaking our regulatory position

• →

  Advise on regulatory routes for new markets, including the US
  

• Act as Heim's Data Protection Officer, advising leadership independently on UK GDPR compliance

• Support DPIAs and data flow sign-off in commercial conversations and NHS go-lives, advising partners and our commercial team

• Own DTAC and DSPT submissions

• Maintain our ISO 27001 certification and lead recertification and surveillance audits

• Run the DCB0129 clinical safety process: hazard logs, safety cases and release sign-off, as Clinical Safety Officer if you hold the credentials

• Work in an AI-native manner to make quality and regulatory work faster: documentation, evidence, audit preparation

• Make compliance easy for the team, with clear processes that fit how a startup actually works. We need the team delivering on our regulatory requirements as part of our day to day and not seen as an afterthought. You’ll therefore need to build an everyday awareness of this into the culture and fabric of the team.

You have taken a software medical device to market and run its quality system. You are hands-on, pragmatic, and comfortable being the only expert in the room.

• Clinical Safety Officer trained (DCB0129/0160). This requires current registration with a UK professional body (e.g. NMC, GMC, HCPC, GPhC) and a licence to practise.

• Experience with FDA regulatory pathways, including exemptions

• NHS experience: DTAC, DSPT, working with trust governance teams

Above all, you care about this. The shift of healthcare into the home is happening, and safe, trusted technology is what lets it scale.

.

• Right to work: You must have the right to work in the UK. We are not able to offer visa sponsorship for this role.

• Availability: We are looking for a start as soon as possible. Please tell us your availability in your application.

• Solve real problems in healthcare: Help healthcare overcome the limitations of legacy technology.

• Give time back to the frontline: Be part of a mission that gives community teams a third of their time back. You will help reduce the 40% of the day that field staff currently spend on administrative tasks and manual workarounds.

• Deeply empathetic engineering: Build tools grounded in frontline reality. Our technology has been shaped by shadowing over 20,000 hours of community staff time.

• Address the issues that matter most: Work on software that directly targets the top concerns of frontline staff, including lone working safety, tiresome admin and repetitive tasks.

• Drive measurable impact: Deliver optimisation solutions that model a 42% average reduction in drive time and up to a 52% reduction in mileage for community teams.

• Build cutting-edge, secure technology: Develop AI that automates non-clinical touchpoints while working within a highly secure, ISO27001 UKAS accredited and DCB0129 compliant framework.

• Application: Send us your profile, tell us why you are a great fit for this role, and confirm when you could start.

• Screening: CV screening video call.

• Case study: In-person presentation 

• Culture fit: In-person conversation with a founder and members of the team.