HHiring Reality
← Flo Health

HIPAA Security Engineer

Flo Health
Location
London
Posted
1 month ago
Department
Engineering
What they actually want (must-haves)
  • 7+ years in security, compliance, or risk management (3+ in a leadership capacity)
  • Bachelor's degree in a related field or equivalent experience
  • Deep expertise in SOC 2 and HIPAA frameworks within the AWS environment
  • Familiarity with PHI handling, GRC and compliance automation platforms
  • Strong ability to manage multiple concurrent audit and certification workstreams
  • Excellent written and verbal communication skills
Nice to have
  • CISA, CISM, or CISSP certifications
  • Experience with NIST 800-53, Cloud Security Alliance (CSA), and Center for Internet Security (CIS) frameworks
  • Experience in healthcare or another regulated industry; HITRUST experience a plus
  • Experience building compliance roadmaps in early-stage startups
  • Exposure to containerization (Docker/Kubernetes), serverless, and big data platforms
What the job really is

As a HIPAA Security Engineer at Flo, you'll lead the design and operation of security controls specific to US healthcare compliance. This role involves collaborating with Product and Engineering teams to implement HIPAA and SOC 2 requirements within Flo's AWS environment, managing compliance certifications, and ensuring the security of services handling protected health information (PHI). You'll also be responsible for vendor risk management and maintaining security policies while serving as the primary point of contact for US regulators.

Benefits
  • Competitive salary and annual reviews
  • Opportunity to participate in Flo’s performance incentive scheme
  • Paid holiday, sick leave, and female health leave
  • Enhanced parental leave and pay for maternity, paternity, same-sex and adoptive parents
  • Accelerated professional growth through world-changing work and learning support
  • In-person collaboration and work in a hybrid model, with 3 days per week spent in the office
Things to weigh
  • No specific mention of remote work flexibility beyond hybrid model
  • The role requires significant experience, which may limit opportunities for less experienced candidates
  • Focus on compliance may not appeal to those seeking a more technical or development-oriented role
Job score2.8/5
Benefits4/5
Freshness1/5
Career value4/5
Role clarity5/5
Pay transparency0/5

Applying to Flo Health?

See how your résumé matches this role — and tailor it from what actually gets interviews.