Information Security & Risk Officer

The role

This is a hands-on, delivery-focused role in risk management, security advisory, customer and tender responses, audit readiness and data strategy. You will recommend best practices for Engineering, DevOps and IT to address identified risks and gaps.

What you will do

• Run risk sessions across the business
• Keep the risk register current
• Write clear risk reports and chase treatment actions to completion
• Act as the security voice with Engineering, DevOps, IT and Product
• Serve as a first point of contact for security questions from every team
• Answer security questionnaires and tenders accurately
• Assess suppliers before approval
• Gather evidence for Cyber Essentials Plus, DSPT and ISO 27001
• Flag control gaps with practical fixes
• Drive data classification and access control programmes forward with data owners

Required qualifications

• Hands-on infosec and risk experience
• Experience running risk sessions, managing a risk register and reporting on risk to senior stakeholders
• Understanding of authentication vs authorisation, least privilege, IAM, network segmentation and firewalls, patch and vulnerability management, endpoint protection and cloud infrastructure
• Understanding of ISO 27001, DSPT, NIST and Cyber Essentials Plus
• Ability to manage own workload and move between different tasks independently

Nice to have

• experience in health-tech, regulated SaaS or software development
• enterprise risk management experience
• having been through a CE+ audit cycle

Benefits

• Discretionary recognition bonus
• Equity: £15,000 in equal share options
• Adjustable healthcare cover, pension or life insurance
• Dog-friendly office
• Regular hackathons
• Dedicated time to visit GP practices and other healthcare settings
• 28 days of holiday plus bank holidays
• Up to 4 weeks to work from anywhere per year
• Enhanced parental leave
• Fertility support
• Parental loss support
• Free healthy breakfasts, snacks and lunches, plus a weekly sweet treat

About the company

Accurx is building a single, system-wide platform to solve healthcare productivity for the NHS. Their digital toolkit is used by 98% of GP practices.