Information Security & Risk Specialist (12-month FTC)

About This Opportunity

We are representing a confidential health-tech organization seeking an Information Security & Risk Specialist for a 12-month fixed-term contract in London (Shoreditch). Our client is a fast-growing SaaS platform serving the healthcare sector, and they need dedicated capacity to advance priority security workstreams including risk management, Cyber Essentials Plus audit readiness, and data classification programmes.

This is an office-first role requiring presence in Shoreditch three days per week, with core hours of 10am–4pm.

Responsibilities

• Own and maintain the security risk register, facilitating risk assessment sessions with technical and non-technical stakeholders across the business
• Prepare clear risk reporting that translates technical security risk into business language for senior leadership
• Coordinate Cyber Essentials Plus audit readiness, including evidence gathering across IT, platform and security engineering teams
• Review controls against CE+ requirements and provide practical remediation guidance for identified gaps
• Deliver the data classification programme by working with data owners to classify information assets in line with policy
• Review current access patterns and identify gaps in access control implementation
• Track risk treatment actions and manage milestones across risk, CE+ and data workstreams, following up with owners to ensure progress
• Support ISO 27001 and DSPT activities including evidence collection and control documentation
• Communicate security requirements clearly to engineering teams and help non-technical stakeholders understand and act on risk

What We're Looking For

• 3–5 years of hands-on experience in information security and risk management, ideally in health-tech or a regulated SaaS environment
• Proven experience running risk sessions, owning a risk register, and preparing risk reporting for senior stakeholders
• Direct experience working through a Cyber Essentials Plus audit cycle
• Working knowledge of ISO 27001 and Cyber Essentials Plus frameworks, with understanding of proportionate implementation in fast-moving product companies
• Technical understanding of cloud infrastructure, endpoint management, identity and access controls, and network boundaries sufficient to engage in technical conversations
• Excellent written and verbal communication skills with ability to structure thinking logically and set clear expectations
• Comfortable working at pace with minimal supervision, managing your own workload and escalating blockers proactively
• Understanding of healthcare data protection requirements and the importance of patient and clinician trust

How We Work With You

As a specialized recruiting firm, Get A Job.ai partners with leading organizations to connect them with exceptional talent. When you apply through our platform at getajob.ai, one of our experienced recruiters will screen your application and arrange an initial conversation. If there's a strong match, we'll submit your profile to our client and guide you through their interview process. Please do not attempt to contact the client directly—all communication and coordination will flow through our talent team to ensure the best possible experience for you.

Pay

Pay via Get A Job.ai: £50,000

Additional Benefits: The role includes flexible benefits (healthcare cover, pension, life insurance), 28 days holiday plus bank holidays, up to 4 weeks work-from-anywhere per year, and daily catered meals in the office.

Get A Job.ai is an equal opportunity recruiter. We welcome applications from all qualified candidates regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.