HIPAA Security Engineer

HIPAA Security Engineer Overview

Flo Health is seeking a HIPAA Security Engineer to join our dynamic team in London, UK. This role is open to candidates currently located in the United States, but it requires full-time relocation to London. We provide comprehensive visa sponsorship and a full relocation support package to facilitate a smooth transition for the successful candidate.

As a vital member of Flo’s Security Architecture team, you will be responsible for leading the design and operation of security controls related to US healthcare regulations. Your work will involve collaborating with Product and Engineering teams to implement HIPAA and SOC 2 requirements into technical security measures across Flo’s AWS multi-account environment, which includes services such as EKS, Lambda, RDS, S3, VPC networking, IAM, and KMS.

Your Responsibilities

• Lead the annual SOC 2 and HIPAA certification processes, managing interactions with external auditors and professional services.
• Collaborate with the Engineering team to enhance AWS workloads, including EKS and EC2, to comply with HIPAA and SOC 2 controls.
• Conduct technical security design reviews and architectural risk assessments for services that handle Protected Health Information (PHI).
• Establish and maintain security policies and standards, integrating risk assessment activities into engineering workflows.
• Oversee vendor risk management tasks, including contract evaluations and security posture assessments.
• Work with control owners to automate evidence collection and ensure that security controls facilitate rather than hinder operations.
• Act as the primary point of contact for US regulators and partners regarding security matters.
• Support the broader Security team in aligning with ISO 27001/27701 standards and report risk statuses to security leadership.
• Manage and integrate Governance, Risk, and Compliance (GRC) and compliance automation tools to enhance monitoring and reporting.

Your Experience

• A minimum of 7 years of experience in security, compliance, or risk management, with at least 3 years in a leadership role.
• A Bachelor’s degree in a relevant field or equivalent professional experience.
• Extensive knowledge of SOC 2 and HIPAA frameworks, particularly within AWS environments.
• Experience with handling Protected Health Information (PHI) and familiarity with Governance, Risk, and Compliance (GRC) automation platforms.
• Ability to manage multiple audit and certification processes simultaneously.
• Strong written and verbal communication skills, capable of translating complex compliance requirements into actionable items for engineering and business teams.
• Preferred certifications include CISA, CISM, or CISSP.
• Experience with NIST 800-53, Cloud Security Alliance (CSA), and Center for Internet Security (CIS) frameworks.
• Background in healthcare or other regulated industries; HITRUST experience is a plus.
• Experience in developing compliance roadmaps in early-stage startups.
• Familiarity with containerization technologies (Docker/Kubernetes), serverless architectures, and big data platforms.
• Exposure to DevSecOps practices and Agile development methodologies.
• Experience in vendor management.

What You’ll Get

• Competitive salary with annual performance reviews.
• Eligibility to participate in Flo’s performance incentive scheme.
• Paid time off for holidays, sick leave, and female health leave.
• Enhanced parental leave and pay for all types of parents, including maternity, paternity, same-sex, and adoptive.
• Opportunities for professional growth through impactful work and learning support.
• Hybrid work model with three days per week in the office.
• Five-week fully paid sabbatical after five years of employment.
• Access to Flo Premium for friends and family, along with additional health, pension, and wellbeing benefits.

At Flo, we are committed to diversity, equity, and inclusion. We believe that our strength lies in our differences and welcome applicants from all backgrounds, communities, and identities. Join us in building a better future for female health.

Degree Requirement: Bachelor’s

Visa Sponsorship Promising