💬 ACCURX IS SOLVING HEALTHCARE PRODUCTIVITY FOR THE NHS. For decades, the NHS has struggled with fragmented systems that make simple tasks feel impossible. At Accurx, we’re changing that by building a single, system-wide platform that helps every patient get gold-standard, efficient, and joined-up care. What started as a way for GPs to text a patient has now evolved into an all-in-one digital toolkit used by 98% of GP practices. Our platform now powers Total Triage to manage patient demand, and Self-Book, which lets patients schedule their own appointments in seconds. We’ve automated routine care with Patient Questionnaires for long-term conditions, while Accumail finally allows staff-to-staff communication to happen instantly across different care settings. We’re now pushing the boundaries of the consultation itself with Accurx Scribe, our AI-powered note-taker that drafts medical notes in real-time. We’re not just shipping features. We’re giving clinicians their time back and ensuring every patient journey is as smooth as it should be. CHALLENGES YOU’LL SOLVE... * Own our privacy frameworks end-to-end: Maintain and continuously improve the ROPA, data mapping and third-party risk programme so they're accurate, scalable and understood by the people who use them. * Lead the DPIA process: Run end-to-end assessments for new products, features and integrations, ensuring higher-risk processing gets proper scrutiny and a consistent standard of output. * Be the internal authority on NHS IG: Lead our annual DSPT submission and own day-to-day NHS Information Governance compliance, building deep expertise the business can rely on. * Act as the primary advisory point: Handle the majority of data protection and IG queries from across the business, giving practical, well-reasoned guidance and knowing when to escalate. * Own supplier due diligence: Lead vendor privacy reviews, including DPA reviews, TIAs, DPIAs for high-risk suppliers and security questionnaire reviews. * Handle individual rights requests: Lead on complex or sensitive DSRs, ensuring responses are accurate, timely and well-considered. * Build privacy culture: Design and deliver training and awareness activities that make privacy feel practical and relevant, not a blocker. YOU SHOULD APPLY IF... * You have 4+ years in privacy or data protection, ideally with exposure to health-tech, NHS IG or high-growth technology environments * You're comfortable driving work forward independently - you make confident calls, own your outputs and know when to escalate * You have a strong working knowledge of UK GDPR, DPA 2018, and PECR applied to SaaS products * You've built or maintained privacy frameworks before (ROPA, DPIA programmes, third-party risk management) and understand what makes them work in practice * You see yourself as an enabler, you enjoy working with product and engineering teams and help them build compliance rather than slowing them down * You're a clear, practical communicator who can translate legal requirements into guidance that non-specialists will actually act on * You hold or are working towards a recognised privacy certification (CIPP/E, CIPM, ISEB BCS) WHAT’S IN IT FOR ME? You'll be joining an established but fast-growing Tech for Good movement, where we're led by our Principles and our mission to solve healthcare productivity. * £65,000 - £80,000 salary + share options up to £15,000 * Benefits to suit you: adjust your healthcare cover, your pension or life insurance, whatever stage you’re at in life * Flexible working: We are an office first culture and ask that you’re in our (dog-friendly) Shoreditch office 3 days a week, with core hours of 10am - 4pm * Time off: You’ll get 28 days of holiday (plus bank holidays) and up to 4 weeks to work from anywhere per year * Family matters: We offer enhanced parental leave, fertility support and parental loss support * We have our very own Chef! Free healthy breakfasts, snacks and lunches will be provided, with the occasional sweet treat!