‹ All jobs
Information Security & Risk Officer
<h2><strong>💬 Accurx is solving healthcare productivity for the NHS.</strong></h2><p style="min-height:1.5em">For decades, the NHS has struggled with fragmented systems that make simple tasks feel impossible. At Accurx, we’re changing that by building a single, system-wide platform that helps every patient get gold-standard, efficient, and joined-up care.</p><p style="min-height:1.5em">What started as a way for GPs to text a patient has now evolved into an all-in-one digital toolkit used by 98% of GP practices.</p><p style="min-height:1.5em">Our platform now powers <a target="_blank" rel="noopener noreferrer nofollow" href="https://www.accurx.com/primary-care"><strong>Total Triage</strong></a> to manage patient demand, and <a target="_blank" rel="noopener noreferrer nofollow" href="https://www.accurx.com/booking"><strong>Self-Book</strong>,</a><strong> </strong>which lets patients schedule their own appointments in seconds. We’ve automated routine care with <a target="_blank" rel="noopener noreferrer nofollow" href="https://www.accurx.com/questionnaires"><strong>Patient Questionnaires</strong></a> for long-term conditions, while <a target="_blank" rel="noopener noreferrer nofollow" href="https://www.accurx.com/accumail"><strong>Accumail</strong></a> finally allows staff-to-staff communication to happen instantly across different care settings. We’re now pushing the boundaries of the consultation itself with <a target="_blank" rel="noopener noreferrer nofollow" href="https://www.accurx.com/scribe"><strong>Accurx Scribe</strong></a>, our AI-powered note-taker that drafts medical notes in real-time.</p><p style="min-height:1.5em">We’re not just shipping features. We’re giving clinicians their time back and ensuring every patient journey is as smooth as it should be.</p><h2><br /></h2><h2>The role</h2><p style="min-height:1.5em">It's a hands-on, delivery-focused role, and you'll <strong>make an impact from the start</strong> in risk management, security advisory, customer and tender responses, audit readiness and our data strategy.</p><p style="min-height:1.5em"><strong>This isn't a security engineering role.</strong> You won't configure firewalls or run vulnerability scans. Instead, you'll understand our technical environment well enough to spot risks and gaps, then recommend best practices for Engineering, DevOps and IT to put in place. A background in compliance management alone won't be enough for this role.</p><p style="min-height:1.5em">You'll report to our Senior Information Security Officer, who owns our GRC framework, ISO 27001 programme, CE/CE+ & DSPT compliance, and the security risk register. <strong>You'll help deliver across all of it. </strong></p><p style="min-height:1.5em"></p><h2><strong>Challenges you’ll solve...</strong></h2><ul style="min-height:1.5em"><li><p style="min-height:1.5em"><strong>Own risk management:</strong> run risk sessions across the business, keep the risk register current, write clear risk reports and chase treatment actions to completion</p></li><li><p style="min-height:1.5em"><strong>Advise the business:</strong> be the security voice with Engineering, DevOps, IT and Product, and a first point of contact for security questions from every team</p></li><li><p style="min-height:1.5em"><strong&