Information Security & Risk Specialist (6-month FTC)
Core
Own the security risk register, drive Cyber Essentials Plus readiness, and deliver the data classification programme for a health-tech platform serving NHS patients.
Role type
Information Security & Risk Specialist (GRC focus)
Builds
Security risk register, CE+ audit evidence, data classification policies
Domain
Health-tech / Regulated SaaS
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
risk management, Cyber Essentials Plus audit coordination, data classification, ISO 27001 knowledge, cloud infrastructure understanding, identity and access controls, network boundaries, stakeholder communication
Preferred skills
health-tech experience, regulated SaaS environment experience, technical conversation fluency
Technologies
ISO 27001, Cyber Essentials Plus, cloud infrastructure, endpoint management, identity and access management
Responsibilities
Facilitate risk assessment sessions and maintain the security risk register, coordinate evidence gathering for CE+ audits, classify information assets and review access patterns, track risk treatment actions and manage milestones, support ISO 27001 and DSPT activities, communicate security requirements to engineers and non-technical stakeholders
Seniority
Mid-level, hands-on IC