Information Security & Risk Specialist (12-month FTC)

Accurx

London (Shoreditch) 9/13/2026 Full Time

<h2>💬 Accurx is solving healthcare productivity for the NHS.</h2>For decades, the NHS has struggled with fragmented systems that make simple tasks feel impossible. At Accurx, we’re changing that by building a single, system-wide platform that helps every patient get gold-standard, efficient, and joined-up care.What started as a way for GPs to text a patient has now evolved into an all-in-one digital toolkit used by 98% of GP practices.Our platform now powers <a target="_blank" rel="noopener noreferrer nofollow" href="https://www.accurx.com/primary-care">Total Triage</a> to manage patient demand, and <a target="_blank" rel="noopener noreferrer nofollow" href="https://www.accurx.com/booking">Self-Book,</a> which lets patients schedule their own appointments in seconds. We’ve automated routine care with <a target="_blank" rel="noopener noreferrer nofollow" href="https://www.accurx.com/questionnaires">Patient Questionnaires</a> for long-term conditions, while <a target="_blank" rel="noopener noreferrer nofollow" href="https://www.accurx.com/accumail">Accumail</a> finally allows staff-to-staff communication to happen instantly across different care settings. We’re now pushing the boundaries of the consultation itself with <a target="_blank" rel="noopener noreferrer nofollow" href="https://www.accurx.com/scribe">Accurx Scribe</a>, our AI-powered note-taker that drafts medical notes in real-time.We’re not just shipping features. We’re giving clinicians their time back and ensuring every patient journey is as smooth as it should be.<h2> How this role sits within the function</h2><ul style="min-height:1.5em"><li>Reports to: Senior Information Security Officer</li><li>Function: Privacy & Information Security</li><li>Contract type: Twelve-month fixed-term contract</li></ul>This role works day-to-day alongside the Senior Information Security Officer, who owns the GRC framework, ISO 27001 programme, CE+ and DSPT compliance, and the security risk register. It provides dedicated capacity to push forward priority workstreams - particularly risk management, CE+ audit readiness, and data strategy delivery.<h2>Challenges you’ll solve...</h2><ul style="min-height:1.5em"><li>Own the security risk register: Facilitate risk assessment sessions with technical and non-technical stakeholders across the business, keep the register current and accurate, and prepare clear risk reporting that translates technical risk into business language.</li><li>Drive Cyber Essentials Plus readiness: Coordinate evidence gathering across IT, Platform and Security Engineering ahead of the CE+ deep-dive audit, reviewing controls against requirements and flagging gaps with practical remediation guidance.</li><li>Deliver our data classification programme: Work with data owners to classify information assets in line with policy, and push the access control programme forward by reviewing current access patterns and identifying gaps.</li><li>Keep risk treatment moving: Track risk treatment actions and follow up with owners so items progress rather than stall, managing milestones and blockers across the risk, CE+, and data workstreams.</li><li>Support the wider security programme: Contribute to ISO 27001 and DSPT activities where your work intersects, including evidence collection and control documentation, and support policy and process documentation as needed.</li><li>Be a translator between security and the business: Communicate security requirements clearly to engineers, and help non-technical stakeholders understand risk well enough to act on it.</li></ul><h2>You should apply if...</h2><ul style="min-height:1.5em"><li>You have 3–5 years of hands-on experience in information security and risk management, ideally in health-tech or a regulated SaaS environment.</li><li>You've run risk sessions, owned a risk register, and prepared risk reporting for senior stakeholders</li><li>You've worked through a Cyber Essentials Plus audit cycle yourself</li><li>You understand cloud infrastructure, endpoint management, identity and access controls, and network boundaries well enough to hold your own in a technical conversation - you don't need to be a developer.</li><li>You have working knowledge of ISO 27001 and Cyber Essentials Plus, and know what "proportionate" looks like in a fast-moving product company.</li><li>You write and communicate clearly, structuring your thinking logically so people know what's expected of them and why.</li><li>You're comfortable working at pace and without extensive hand-holding, managing your own workload and flagging blockers early.</li><li>You care about what Accurx does, and understand that the data we protect belongs to patients and clinicians who trust us with it.</li></ul><h2>What’s in it for me?</h2>You'll be joining an established but fast-growing Tech for Good movement, led by our <a target="_blank" rel="noopener noreferrer nofollow" href="https://www.notion.so/accurx/How-we-work-Accurx-Principles-211640edee304821b4480d3f9c30e051">Principles</a> and our <a target="_blank" rel="noopener noreferrer nofollow" href="https://accurx.notion.site/Mission-and-Vision-fe9b12ff78bd4a7996682fc5c09c2d8e">mission</a> to solve healthcare productivity. <ul style="min-height:1.5em"><li>£50k salary</li><li><a target="_blank" rel="noopener noreferrer nofollow" href="https://accurx.notion.site/Perks-Benefits-f1e9148b71be486791aa2c503e5d775a?pvs=74">Benefits to suit you: </a>adjust your healthcare cover, your pension or life insurance, whatever stage you’re at in life</li><li>Flexible working: We are an office-first culture and ask that you’re in our (dog-friendly) Shoreditch office 3 days a week, with core hours of 10 am - 4 pm</li><li>Time off: You’ll get 28 days of holiday (plus bank holidays) and up to 4 weeks to work from anywhere per year</li><li>We have our very own Chef! Free healthy breakfasts, snacks and lunches will be provided, with the occasional sweet treat!</li></ul><hr>Compensation: £50K<ul><li> • £50K</li></ul>Find more <a href="https://www.arbeitnow.co.uk/english-speaking-jobs">English Speaking Jobs in United Kingdom</a> on Arbeitnow</a>

Product & Technology

Information Security & Risk Specialist (12-month FTC)

Related on GOH