Senior Privacy Manager

For decades, the NHS has struggled with fragmented systems that make simple tasks feel impossible. At Accurx, we’re changing that by building a single, system-wide platform that helps every patient get gold-standard, efficient, and joined-up care.

What started as a way for GPs to text a patient has now evolved into an all-in-one digital toolkit used by 98% of GP practices.

Our platform now powers Total Triage to manage patient demand, and Self-Book, which lets patients schedule their own appointments in seconds. We’ve automated routine care with Patient Questionnaires for long-term conditions, while Accumail finally allows staff-to-staff communication to happen instantly across different care settings. We’re now pushing the boundaries of the consultation itself with Accurx Scribe, our AI-powered note-taker that drafts medical notes in real-time.

We’re not just shipping features. We’re giving clinicians their time back and ensuring every patient journey is as smooth as it should be.

• Own our privacy frameworks end-to-end: Maintain and continuously improve the ROPA, data mapping and third-party risk programme so they're accurate, scalable and understood by the people who use them.

• Lead the DPIA process: Run end-to-end assessments for new products, features and integrations, ensuring higher-risk processing gets proper scrutiny and a consistent standard of output.

• Be the internal authority on NHS IG: Lead our annual DSPT submission and own day-to-day NHS Information Governance compliance, building deep expertise the business can rely on.

• Act as the primary advisory point: Handle the majority of data protection and IG queries from across the business, giving practical, well-reasoned guidance and knowing when to escalate.

• Own supplier due diligence: Lead vendor privacy reviews, including DPA reviews, TIAs, DPIAs for high-risk suppliers and security questionnaire reviews.

• Handle individual rights requests: Lead on complex or sensitive DSRs, ensuring responses are accurate, timely and well-considered.

• Build privacy culture: Design and deliver training and awareness activities that make privacy feel practical and relevant, not a blocker.

• You have 4+ years in privacy or data protection, ideally with exposure to health-tech, NHS IG or high-growth technology environments

• You're comfortable driving work forward independently - you make confident calls, own your outputs and know when to escalate

• You have a strong working knowledge of UK GDPR, DPA 2018, and PECR applied to SaaS products

• You've built or maintained privacy frameworks before (ROPA, DPIA programmes, third-party risk management) and understand what makes them work in practice

• You see yourself as an enabler, you enjoy working with product and engineering teams and help them build compliance rather than slowing them down

• You're a clear, practical communicator who can translate legal requirements into guidance that non-specialists will actually act on

• You hold or are working towards a recognised privacy certification (CIPP/E, CIPM, ISEB BCS)

You'll be joining an established but fast-growing Tech for Good movement, where we're led by our Principles and our mission to solve healthcare productivity.

• £65,000 - £80,000 salary + share options up to £15,000

• Benefits to suit you: adjust your healthcare cover, your pension or life insurance, whatever stage you’re at in life

• Flexible working: We are an office first culture and ask that you’re in our (dog-friendly) Shoreditch office 3 days a week, with core hours of 10am - 4pm

• Time off: You’ll get 28 days of holiday (plus bank holidays) and up to 4 weeks to work from anywhere per year

• Family matters: We offer enhanced parental leave, fertility support and parental loss support

• We have our very own Chef! Free healthy breakfasts, snacks and lunches will be provided, with the occasional sweet treat!