Healthcare Information Security & Risk Lead

Accurx; Greater London; On-site; GBP 65,000 - 75,000; Full time

Benefits offered by this job

Discretionary bonus

Equity options (£15k)

Office in Shoreditch (dog-friendly)

Hackathons and user visits

28 days holiday + 4 weeks remote work

Healthcare/pension benefits

Job summary

Accurx is seeking an experienced security professional to own risk management, advise cross-functional teams, and strengthen data governance across our NHS-focused platform. You will work with Engineering, DevOps, IT and Product to embed best practices for risk, audits, and compliance.

You’ll report to the Senior Information Security Officer and help deliver ISO 27001, DSPT, and Cyber Essentials Plus initiatives while protecting patient and clinician data in a fast-moving product company.

Qualifications

• Hands-on infosec and risk experience, ideally in health-tech or regulated SaaS.
• Technical depth in IAM, authentication vs authorisation, least privilege, network segmentation.
• Familiarity with ISO 27001, DSPT, NIST and Cyber Essentials Plus.
• Ability to manage multiple tasks (tender, questionnaire, engineering discussion) in fast-paced environment.
• Commitment to healthcare data protection for patients and clinicians.

Responsibilities

• Own risk management: run risk sessions, update risk register, chase actions.
• Advise Engineering, DevOps, and IT on security questions and risk posture.
• Respond to security questionnaires and evaluate suppliers.
• Maintain audit readiness for Cyber Essentials Plus, DSPT and ISO 27001.
• Drive data classification and access control programs with data owners.

Skills

Risk assessment

Information security

Security governance

Job description

Accurx is seeking an experienced security professional to own risk management, advise cross-functional teams, and strengthen data governance across our NHS-focused platform. You will work with Engineering, DevOps, IT and Product to embed best practices for risk, audits, and compliance.

You’ll report to the Senior Information Security Officer and help deliver ISO 27001, DSPT, and Cyber Essentials Plus initiatives while protecting patient and clinician data in a fast-moving product company.