HIPAA & SOC2 Security Lead — Cloud SaaS

Flo Health Inc.; Greater London; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

A leading health and fitness technology firm is seeking a Compliance Leader to oversee security controls focused on HIPAA and SOC 2 certifications. The ideal candidate will have over 7 years of experience in security/compliance, including 3+ years in a leadership role. The role involves defining security policies, managing compliance audits, and automating risk assessment processes. The firm offers a competitive salary, professional growth opportunities, and flexible working arrangements.

Benefits

Competitive salary

Annual performance reviews

Paid holidays and sick leave

Enhanced parental leave

Flexible home office arrangements

Fully paid sabbatical after 5 years

Health and wellness perks

Qualifications

• 7+ years in security/compliance with at least 3 years in a leadership role.
• Deep expertise in SOC 2 and HIPAA frameworks within a Cloud-based SaaS environment.
• Strong ability to translate complex compliance requirements into clear actions.

Responsibilities

• Lead annual SOC 2 and HIPAA certifications with external auditors.
• Define and maintain security policies; embed risk assessments in processes.
• Partner with control owners for compliance monitoring and reporting.

Skills

Security compliance leadership

SOC 2 and HIPAA frameworks

Risk assessment

Excellent stakeholder management

Compliance automation

Education

Bachelor's degree in a related field

Tools

GRC platforms

Docker

Kubernetes

Job description

A leading health and fitness technology firm is seeking a Compliance Leader to oversee security controls focused on HIPAA and SOC 2 certifications. The ideal candidate will have over 7 years of experience in security/compliance, including 3+ years in a leadership role. The role involves defining security policies, managing compliance audits, and automating risk assessment processes. The firm offers a competitive salary, professional growth opportunities, and flexible working arrangements.