Information Security Team Lead (HealthTech)

TL;DR

Information Security Team Lead (HealthTech): Leading the end-to-end information security strategy and risk management for a healthcare platform with an accent on ISO 27001 compliance, AI governance, and patient data protection. Focus on building a pragmatic security culture, managing incident response, and implementing robust security controls across IAM, DLP, and zero-trust architectures.

Location: Must be based in London (Hybrid)

Company

hirify.global is a health-tech company focused on providing accessible and personalized healthcare solutions.

What you will do

• Maintain an active risk register and provide candid security posture updates to the Board and leadership.
• Oversee compliance frameworks including ISO 27001, DSPT, and Cyber Essentials Plus.
• Establish strict AI governance frameworks for sensitive patient data.
• Lead end-to-end security incident management, including regulatory reporting and post-mortems.
• Execute the security roadmap across IAM, DLP, zero-trust, email, and endpoint security.
• Foster a pragmatic security culture that balances safety with usability for engineers and clinicians.

Requirements

• Must be based in London and able to work in a hybrid capacity.
• Proven experience owning end-to-end information security in a similar scale company.
• Hands-on experience with ISMS, ISO 27001, or Cyber Essentials Plus.
• Strong technical foundation in IAM, DLP, endpoint, network, and SaaS security.
• Experience protecting sensitive personal data under UK GDPR and managing vendor/AI supply chain risks.
• Direct experience leading security incidents and conducting post-incident reviews.

Nice to have

• Prior experience in HealthTech, healthcare, or FinTech.
• Hands-on experience crafting AI governance frameworks.