HIPAA Security Engineer

Salary: £68,000 - 108,000 per year

Requirements:

• 7+ years of experience in security/compliance, including 3+ years in leadership
• Bachelors degree in a related field
• Deep expertise in SOC 2 and HIPAA frameworks within a cloud-based SaaS environment
• Familiarity with PHI handling, GRC platforms, and compliance automation
• Strong ability to translate complex compliance requirements into clear actions for engineering teams
• Preferred: CISA/CISSP certifications
• Preferred: experience with NIST, HiTrust, Docker/Kubernetes, and DevSecOps

Responsibilities:

• Lead the design and operation of our US Healthcare security controls
• Own the roadmap for HIPAA compliance and SOC 2 Type II certification
• Partner with Engineering and Legal to build a secure, compliant platform for millions of users
• Lead annual SOC 2 and HIPAA certifications, including managing interfaces with external auditors and professional services
• Define and maintain security policies
• Embed risk assessment activities within engineering processes and vendor management
• Partner with control owners to automate evidence gathering and reduce friction in controls
• Serve as the primary Security point of contact for US regulators and partners
• Support the wider Security team with ISO 27001/27701 alignment
• Manage and integrate GRC platforms to streamline compliance monitoring and reporting

Technologies:

• AI
• Cloud
• Docker
• Support
• Kubernetes
• Security
• DevSecOps

More:

We are Flo, the worlds #1 health and fitness app, on a mission to build a better future for female health. We have over 500M downloads, 80M+ monthly users, 7M paid subscribers, and a decade of building trust at scale. Backed by a $200M investment led by General Atlantic, we became the first product of our kind to reach a $1B valuation in 2024. We are building the next generation of digital health — AI-powered, privacy-first, and clinically backed — to help users know their body better. We are a mission-led, product-driven team that moves fast, takes ownership, and cares about craft. We work in a hybrid model with 3 days per week in the office and offer competitive salary and annual reviews, participation in our performance incentive scheme, paid holiday, sick leave, female health leave, enhanced parental leave, accelerated professional growth, a 5-week fully paid sabbatical at 5 years, and Flo Premium for friends and family, plus additional health, pension, and wellbeing perks.

last updated 34 week of 2026