Information Security & Risk Specialist (6-month FTC)
$50,000–$50,000 year
HybridLondon, England, United Kingdom
Job Summary
Facilitate risk assessment sessions with technical and non-technical stakeholders to keep the security risk register current and accurate. Coordinate evidence gathering for Cyber Essentials Plus readiness by reviewing controls against requirements and flagging gaps with practical remediation guidance. Work with data owners to classify information assets in line with policy and push the access control programme forward by identifying gaps. Track risk treatment actions and follow up with owners to ensure items progress across risk, CE+, and data workstreams. Contribute to ISO 27001 and DSPT activities including evidence collection and control documentation. Communicate security requirements clearly to engineers and help non-technical stakeholders understand risk to drive action. Join the Product & Technology Team: Security & Privacy to support the Senior Information Security Officer in delivering priority workstreams for a platform used by 98% of GP practices.
Required Qualifications
- 3–5 years of hands-on experience in information security and risk management
- ideally in health-tech or a regulated SaaS environment
- experience running risk sessions
- experience owning a risk register
- experience preparing risk reporting for senior stakeholders
- experience working through a Cyber Essentials Plus audit cycle
- working knowledge of ISO 27001
- working knowledge of Cyber Essentials Plus
- ability to write and communicate clearly
- ability to structure thinking logically
- comfort working at pace
- ability to manage own workload
- ability to flag blockers early
Desired Qualifications
- understanding of cloud infrastructure
- understanding of endpoint management
- understanding of identity and access controls
- understanding of network boundaries
- ability to hold your own in a technical conversation without being a developer
- understanding of what proportionate looks like in a fast-moving product company
- care about what Accurx does
- understanding that the data we protect belongs to patients and clinicians who trust us with it
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.