HIPAA Security Engineer — London (Relocation & Visa Support)

Flo; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Visa sponsorship

Relocation support

Hybrid work model

5-week sabbatical at 5-year Floversary

Flo Premium for friends & family

Job summary

Flo in London is seeking a HIPAA Security Engineer to lead HIPAA and SOC 2 certifications, shaping the security controls for Flo’s US healthcare services. The role requires relocation to London, visa sponsorship, and formal ties with Flo’s Security Architecture team.

The candidate will own the HIPAA compliance roadmap and work with Engineering and Legal to deliver a secure, compliant platform for millions of users.

Qualifications

• 7+ years in security/compliance, with 3+ in leadership.
• Bachelor’s degree in a related field.
• Deep expertise in SOC 2 and HIPAA within a Cloud-based SaaS environment.
• Familiarity with PHI handling, GRC platforms, and compliance automation.
• Strong ability to translate complex compliance requirements for engineering teams.
• Preferred: CISA/CISSP; experience with NIST, HiTrust, Docker/Kubernetes and DevSecOps.

Responsibilities

• Lead annual SOC 2 and HIPAA certifications; coordinate with auditors and services.
• Define and maintain security policies; embed risk assessment in engineering and vendors.
• Partner with owners to automate evidence gathering and reduce friction.
• Serve as primary Security POC for US regulators and partners; support ISO alignment.
• Manage and integrate GRC platforms for compliance monitoring and reporting.

Skills

SOC 2

HIPAA

Cloud SaaS

PHI handling

GRC platforms

Compliance automation

Leadership

DevSecOps

Education

Bachelor's degree in related field

Tools

Docker

Kubernetes

NIST

HiTrust

Job description

Flo in London is seeking a HIPAA Security Engineer to lead HIPAA and SOC 2 certifications, shaping the security controls for Flo’s US healthcare services. The role requires relocation to London, visa sponsorship, and formal ties with Flo’s Security Architecture team.

The candidate will own the HIPAA compliance roadmap and work with Engineering and Legal to deliver a secure, compliant platform for millions of users.