Strategic Security & Risk Advisor (Health-Tech)

Accurx; London Borough of Hackney; On-site; GBP 65,000 - 75,000; Full time

Benefits offered by this job

£15k equity options

Healthcare & pension benefits

Life insurance

Office-based 3 days/week in Shoreditch

Hackathons and user-site visits

Job summary

Accurx is seeking a Security & Compliance professional to lead risk management, security governance, and data strategy across Engineering, DevOps and Product. You’ll fight to protect patient data while enabling fast, compliant product delivery.

You’ll report to the Senior Information Security Officer and contribute to ISO 27001, DSPT, CE/CE+ and risk registers, driving practical fixes and secure architectures in a busy health-tech environment.

Qualifications

• Hands-on infosec and risk experience ideally in health-tech, regulated SaaS or software dev.
• Technical depth to hold your own: authentication vs authorisation, least privilege, IAM, network segmentation and firewalls.
• Understand ISO 27001, DSPT, NIST and Cyber Essentials Plus, and know what proportionate means in a fast-moving product company.

Responsibilities

• Own risk management: run risk sessions, keep the risk register current, write risk reports, chase actions.
• Advise the business: be the security voice with Engineering, DevOps, IT and Product; first contact for security questions.
• Handle customers, tenders and suppliers: answer security questionnaires and assess suppliers.
• Keep us audit-ready: gather evidence for Cyber Essentials Plus, DSPT and ISO 27001; flag gaps with fixes.
• Deliver our data strategy: drive data classification and access control programs.

Skills

Infosec risk management

GRC

Security advisory

Auditing readiness

Data strategy

Tools

IAM

Network segmentation

Firewalls

Patch & vulnerability management

Cloud security

Job description

Accurx is seeking a Security & Compliance professional to lead risk management, security governance, and data strategy across Engineering, DevOps and Product. You’ll fight to protect patient data while enabling fast, compliant product delivery.

You’ll report to the Senior Information Security Officer and contribute to ISO 27001, DSPT, CE/CE+ and risk registers, driving practical fixes and secure architectures in a busy health-tech environment.