Position: Information Security Analyst

Contract: Permanent - Full Time
Location: Remote

About Cera

Cera is a digital-first healthcare-at-home company delivering care, nursing, telehealth and repeat prescription services in people’s homes via technology. In under five years, Cera has expanded to 10,000+ staff across the UK and Germany, delivering 40,000+ healthcare visits a day, and has grown from zero to circa £300m revenues.

Every day, Cera delivers healthcare services equivalent to 40 hospitals or 1,000 care homes, and has grown 100-fold over the past two years making it one of the fastest growing businesses in Europe. Cera currently holds more than 160+ partnerships with the NHS and local authorities, and the company’s technology is used by 2,000+ businesses nationwide. Its technology predicts health deteriorations in patients 30-fold faster than traditional care companies, with its Professional Carers and Nurses responding to over 5,000 ‘high risk’ alerts each day.

Since the outset of the COVID-19 pandemic, Cera has delivered 10 million healthcare visits in people’s homes, created 10,000 jobs, and licensed its recruitment technology to the UK Government Department of Health to recruit 50,000+ people into healthcare careers.

About the role

We are seeking a driven and detail-oriented Information Security Analyst to join our growing Information Security team. Reporting to the Information Security Manager, you will play a key role in achieving and maintaining Cyber Essentials Plus (CE+) certification, while supporting our wider ISO27001, NHS Supplier Assurance, and policy and process documentation activities.

This is a fantastic opportunity for someone early in their information security career to develop broad, hands-on experience across certification, audit, risk, and governance work in a fast-growing, technology-enabled healthcare business.

• Support achievement and maintenance of Cyber Essentials Plus (CE+) certification across the business, including coordinating evidence gathering, technical control checks, vulnerability remediation tracking, and liaison with our external certifying body.
• Own day-to-day CE+ compliance monitoring by tracking control implementation, scheduling scans and assessments, and maintaining supporting evidence and documentation ahead of renewal cycles.
• Assist the Information Security Manager with ISO27001 implementation and ongoing management, including gap analysis, evidence collection, internal audit support, and maintenance of the Information Security Management System (ISMS) documentation.
• Support NHS Supplier Assurance activities by completing security questionnaires, gathering evidence, and liaising with NHS and other healthcare partners and their assurance teams.
• Contribute to assisting with the Data Security and Protection Toolkit (DSPT) submission and other healthcare-sector assurance frameworks as required.
• Support policy and process documentation, drafting, formatting, and maintaining information security policies, standards, and procedures, ensuring they remain accurate, current, and accessible.
• Coordinate security questionnaires and due diligence requests from customers, partners, and suppliers across teams, including collating responses, chasing outstanding actions, and maintaining trackers.
• Support the management of security risks by maintaining risk registers, logging identified risks, and tracking remediation actions to closure.
• Help build a strong security culture by helping to organise and deliver security awareness training and communications across the business.
• Assist with internal and external audits through evidence gathering, scheduling, and remediation plan tracking.
• Monitor and research evolving security threats, tools, and regulatory changes relevant to Cera’s sector and flag emerging risks or requirements to the Information Security Manager.
• Support security improvement activities by helping to identify control gaps and weaknesses, contributing to remediation plans, and tracking agreed actions through to completion.