HIPAA & SOC2 Security Lead — Hybrid, 5-Week Sabbatical

Flo Health Inc.; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Performance incentive

Parental leave

Sabbatical

Wellbeing perks

Job summary

Flo Health Inc. is seeking a senior security leader to own HIPAA compliance and SOC 2 Type II initiatives for our cloud-based SaaS platform. You will collaborate with Engineering and Legal to build a secure, compliant environment servicing millions of users.

You will lead audits, policy development, and risk programs, ensuring controls are automated and scalable across our global operations.

Qualifications

• 7+ years in security/compliance with 3+ in leadership.
• Deep expertise in SOC 2 and HIPAA within a Cloud-based SaaS environment.
• Experience with PHI handling, GRC platforms and compliance automation.

Responsibilities

• Lead annual SOC 2 and HIPAA certifications, interfacing with auditors and services.
• Define and maintain security policies; embed risk assessment in engineering and vendor management.
• Partner with control owners to automate evidence gathering and reduce friction.
• Serve as the Security POC for US regulators and partners; align with ISO 27001/27701.
• Manage and integrate GRC platforms to streamline monitoring and reporting.

Skills

SOC 2

HIPAA

Leadership

Cloud security

Policy & risk

Clear communication

Regulatory compliance

Education

Bachelor’s degree in a related field

Tools

GRC platforms

PHI handling

Job description

Flo Health Inc. is seeking a senior security leader to own HIPAA compliance and SOC 2 Type II initiatives for our cloud-based SaaS platform. You will collaborate with Engineering and Legal to build a secure, compliant environment servicing millions of users.

You will lead audits, policy development, and risk programs, ensuring controls are automated and scalable across our global operations.