Senior Privacy Manager

Accurx is solving healthcare productivity for the NHS. For decades, the NHS has struggled with fragmented systems that make simple tasks feel impossible. At Accurx, we’re changing that by building a single, system-wide platform that helps every patient get gold-standard, efficient, and joined-up care. What started as a way for GPs to text a patient has now evolved into an all-in-one digital toolkit used by 98% of GP practices. Our platform now powers Total Triage to manage patient demand, and Self-Book, which lets patients schedule their own appointments in seconds. We’ve automated routine care with Patient Questionnaires for long-term conditions, while Accumail finally allows staff-to-staff communication to happen instantly across different care settings. We’re now pushing the boundaries of the consultation itself with Accurx Scribe, our AI-powered note-taker that drafts medical notes in real-time. We’re not just shipping features. We’re giving clinicians their time back and ensuring every patient journey is as smooth as it should be.

Challenges you’ll solve:

• Own our privacy frameworks end-to-end: Maintain and continuously improve the ROPA, data mapping and third-party risk programme so they're accurate, scalable and understood by the people who use them.
• Lead the DPIA process: Run end-to-end assessments for new products, features and integrations, ensuring higher-risk processing gets proper scrutiny and a consistent standard of output.
• Be the internal authority on NHS IG: Lead our annual DSPT submission and own day-to-day NHS Information Governance compliance, building deep expertise the business can rely on.
• Act as the primary advisory point: Handle the majority of data protection and IG queries from across the business, giving practical, well-reasoned guidance and knowing when to elevate.
• Own supplier due diligence: Lead vendor privacy reviews, including DPA reviews, TIAs, DPIAs for high-risk suppliers and security questionnaire reviews.
• Handle individual rights requests: Lead on complex or sensitive DSRs, ensuring responses are accurate, timely and well-considered.
• Build privacy culture: Design and deliver training and awareness activities that make privacy feel practical and relevant, not a blocker.

You should apply if:

• You have 4+ years in privacy or data protection, ideally with exposure to health-tech, NHS IG or high-growth technology environments.
• You're comfortable driving work forward independently - you make confident calls, own your outputs and know when to elevate.
• You have a strong working knowledge of UK GDPR, DPA 2018, and PECR applied to SaaS products.
• You've built or maintained privacy frameworks before (ROPA, DPIA programmes, third-party risk management) and understand what makes them work in practice.
• You see yourself as an enabler, you enjoy working with product and engineering teams and help them build compliance rather than slowing them down.
• You're a clear, practical communicator who can translate legal requirements into guidance that non-specialists will actually act on.
• You hold or are working towards a recognised privacy certification (CIPP/E, CIPM, ISEB BCS).

What’s in it for me?

• You’ll be joining an established but fast-growing Tech for Good movement, where we’re led by our Principles and our mission to solve healthcare productivity.
• £65,000 - £80,000 salary + share options up to £15,000.
• Benefits to suit you: adjust your healthcare cover, your pension or life insurance, whatever stage you’re at in life.
• Flexible working: We are an office first culture and ask that you’re in our (dog-friendly) Shoreditch office 3 days a week, with core hours of 10am - 4pm.
• Time off: You’ll get 28 days of holiday (plus bank holidays) and up to 4 weeks to work from anywhere per year.
• Family matters: We offer enhanced parental leave, fertility support and parental loss support.
• We have our very own Chef! Free healthy breakfasts, snacks and lunches will be provided, with the occasional sweet treat!