HIPAA & SOC 2 Security Architect (Cloud SaaS)

Flo Health; Greater London; Hybrid; GBP 110,000 - 150,000; Full time

Benefits offered by this job

Competitive salary & annual reviews

Performance incentive scheme

Paid holiday & parental leave

Sabbatical after 5 years

Hybrid work model: 3 days in office

Job summary

Flo Health in London is seeking a senior Security Architect to lead the design and operation of HIPAA and SOC 2 controls for our Cloud-based SaaS. You will own the roadmap for compliance, partnering with Engineering and Legal to build a secure, scalable platform for millions of users.

The role combines leadership with hands-on policy, risk management, automation of evidence gathering, and liaison with regulators.

Qualifications

• 7+ years in security/compliance (3+ in leadership) with a Bachelor’s degree in a related field.
• Deep expertise in SOC 2 and HIPAA frameworks within a Cloud-based SaaS environment.
• Familiarity with PHI handling, GRC platforms, and compliance automation.
• Strong ability to translate complex compliance requirements into clear actions for engineering teams.
• Preferred: CISA/CISSP; experience with NIST, HiTrust, Docker/Kubernetes, and DevSecOps.

Responsibilities

• Compliance Leadership: Lead annual SOC 2 and HIPAA certifications, managing interfaces with external auditors and professional services.
• Policy & Risk: Define and maintain security policies; embed risk assessment activities within engineering processes and vendor management.
• Operational Excellence: Partner with control owners to automate evidence gathering and ensure controls reduce friction.
• Stakeholder Management: Primary Security POC for US regulators and partners; align with ISO 27001/27701.
• Tooling: Manage and integrate GRC platforms to streamline compliance monitoring and reporting.

Skills

SOC 2

HIPAA

Cloud security

GRC platforms

Security leadership

DevSecOps

Education

Bachelor’s degree in related field

Tools

Docker/Kubernetes

GRC platforms

Security monitoring tools

Job description

Flo Health in London is seeking a senior Security Architect to lead the design and operation of HIPAA and SOC 2 controls for our Cloud-based SaaS. You will own the roadmap for compliance, partnering with Engineering and Legal to build a secure, scalable platform for millions of users.

The role combines leadership with hands-on policy, risk management, automation of evidence gathering, and liaison with regulators.