HealthTech Information Security & Risk Lead

Accurx; Greater London; On-site; EUR 56,000 - 61,000; Full time

Benefits offered by this job

Salary £50k

Flexible working in UK office

Dog-friendly office

28 days holiday + bank holidays

Chef and free meals occasionally

Job summary

Accurx is seeking a hands-on Information Security professional to lead risk management and compliance work within our Privacy & Information Security function. You will own risk registers, drive CE+ readiness, and contribute to ISO 27001 and DSPT activities.

You’ll translate security requirements into clear guidance for engineers and non-technical stakeholders, manage deadlines across multiple workstreams, and help protect patient data in a fast-moving health-tech environment in the UK.

Qualifications

• 3–5 years hands-on information security and risk management experience, ideally in health-tech or regulated SaaS.
• Experience running risk sessions, owning a risk register and reporting to senior stakeholders.
• Experience through a Cyber Essentials Plus audit cycle.
• Understanding of cloud infrastructure, endpoint management, IAM, and network boundaries.
• Knowledge of ISO 27001 and Cyber Essentials Plus, with practical risk translation for non-technical audiences.

Responsibilities

• Own the security risk register and run risk assessments with technical and non-technical stakeholders.
• Drive Cyber Essentials Plus readiness and coordinate evidence gathering across IT, Platform and Security Engineering.
• Deliver our data classification programme and push the access control programme forward.
• Track risk treatment actions and ensure milestones progress across workstreams.
• Contribute to ISO 27001 and DSPT activities including evidence collection and control documentation.
• Translate security requirements clearly to engineers and help non-technical stakeholders understand risk.

Skills

Information security

Risk management

ISO 27001

Cyber Essentials Plus

Technical communication

Cloud infrastructure

Job description

Accurx is seeking a hands-on Information Security professional to lead risk management and compliance work within our Privacy & Information Security function. You will own risk registers, drive CE+ readiness, and contribute to ISO 27001 and DSPT activities.

You’ll translate security requirements into clear guidance for engineers and non-technical stakeholders, manage deadlines across multiple workstreams, and help protect patient data in a fast-moving health-tech environment in the UK.