HIPAA Security Engineer at Flo Health

✨ The Stack take on this Flo Health job

• 🏢 This is Flo Health's only job here right now
• 🛂 Skilled Worker visa. Standard minimum salary: £41,700 a year guide
• 💡 No salary shown. Ask Flo Health if it is above the minimum.

Updated 2026-11-03, from our data and official sources.

Apply with your AI assistant

With The Stack connected to Claude, ChatGPT or Cursor, paste this. Your assistant tailors your CV and cover letter, checks the visa facts and gives you the apply link.

Help me apply to this job on The Stack: https://jobs.trythestack.co/jobs/hipaa-security-engineer-flo-health

Not connected yet? Connect in a minute. To help your user apply, call the MCP tool prepare_application with slug "hipaa-security-engineer-flo-health": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.

About the role

Responsibilities:
- Own the HIPAA compliance roadmap and lead annual HIPAA and SOC 2 Type II certification activities.
- Design, operate, and improve US healthcare security controls across the platform.
- Define and maintain security policies, embed risk assessments into engineering and vendor processes.
- Automate evidence collection and partner with control owners to reduce audit friction.
- Manage GRC tooling, integrate compliance monitoring, and produce clear reports for stakeholders.
- Act as primary security point of contact for US regulators, external auditors, and partners; support ISO 27001/27701 alignment.

Requirements:
- 7+ years in security/compliance with at least ~3 years in a leadership or senior contributor role; bachelor’s degree in a related field preferred.
- Deep, hands-on experience with HIPAA and SOC 2 in cloud-based SaaS environments and practical PHI handling knowledge.
- Familiarity with GRC platforms, compliance automation, and evidence workflows.
- Strong ability to translate regulatory requirements into actionable engineering controls and testable evidence.
- Preferred: CISA/CISSP, experience with NIST/HiTrust frameworks, and familiarity with Docker/Kubernetes and DevSecOps practices.
- Willingness to relocate to London; visa sponsorship and relocation support available.

Responsibilities

You will lead the design and operation of US healthcare security controls while managing HIPAA and SOC 2 compliance roadmaps. Additionally, you will serve as the primary security point of contact for regulators and automate evidence gathering to streamline compliance monitoring.

Requirements

Candidates must have at least 7 years of experience in security or compliance, including 3 years in a leadership role. A bachelor's degree in a related field is required, along with deep expertise in HIPAA and SOC 2 frameworks within cloud-based environments.

Key skills

• HIPAA — in 1 other listing on The Stack
• SOC 2 — in 3 other listings on The Stack
• Security Architecture — in 10 other listings on The Stack
• Compliance Leadership — not in any other listing on The Stack
• Risk Assessment — in 19 other listings on The Stack
• Vendor Management — in 10 other listings on The Stack
• GRC Platforms — not in any other listing on The Stack
• Cloud Security — in 70 other listings on The Stack
• SaaS
• PHI Handling
• ISO 27001
• ISO 27701
• NIST
• HiTrust
• Docker
• Kubernetes

Relocation terms mentioned in this listing

• relocation support
• visa sponsorship

Quoted from the listing's text; confirm the details with Flo Health.

On The Stack (as of 2026-11-03)

• This is Flo Health's only listing on The Stack.
• 209 visa-sponsored jobs in the United Kingdom on The Stack, posted in the last 60 days.
• 38 visa-sponsored security engineer jobs in Europe on The Stack, posted in the last 60 days.

Frequently asked questions about Flo Health

Is this HIPAA Security Engineer role still open?

It was posted on 2026-08-10. Listings more than 30 days old may no longer be active, so check Flo Health's site before applying.

Does Flo Health offer visa sponsorship?

This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Flo Health's site.

Where is this role located?

The listing gives the location as London, United Kingdom. It is marked on-site.

What skills does this role ask for?

The listing names: HIPAA, SOC 2, Security Architecture, Compliance Leadership, Risk Assessment, Vendor Management, GRC Platforms, Cloud Security, SaaS, PHI Handling, ISO 27001, ISO 27701, NIST, HiTrust, Docker, Kubernetes.