# HIPAA Security Engineer at Flo Health

> The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday. This is one job from the board.

> Responsibilities: - Own the HIPAA compliance roadmap and lea

- **Company:** Flo Health (https://jobs.trythestack.co/companies/flo-health)
- **Location:** London, United Kingdom
- **Work arrangement:** On-site
- **Employment type:** Full-time
- **Experience level:** 5–10 years
- **Visa sponsorship:** Offered, according to the listing
- **Key skills:** HIPAA, SOC 2, Security Architecture, Compliance Leadership, Risk Assessment, Vendor Management, GRC Platforms, Cloud Security, SaaS, PHI Handling, ISO 27001, ISO 27701, NIST, HiTrust, Docker, Kubernetes
- **Posted by employer:** 2026-08-10
- **Added to The Stack:** 2026-08-11
- **Status:** May no longer be active (posted more than 60 days ago)
- **Apply:** https://job-boards.greenhouse.io/flohealth/jobs/7821391003 (the employer's own application page)
- **Human page:** https://jobs.trythestack.co/jobs/hipaa-security-engineer-flo-health

## About the role

Responsibilities:
- Own the HIPAA compliance roadmap and lead annual HIPAA and SOC 2 Type II certification activities.
- Design, operate, and improve US healthcare security controls across the platform.
- Define and maintain security policies, embed risk assessments into engineering and vendor processes.
- Automate evidence collection and partner with control owners to reduce audit friction.
- Manage GRC tooling, integrate compliance monitoring, and produce clear reports for stakeholders.
- Act as primary security point of contact for US regulators, external auditors, and partners; support ISO 27001/27701 alignment.

Requirements:
- 7+ years in security/compliance with at least ~3 years in a leadership or senior contributor role; bachelor’s degree in a related field preferred.
- Deep, hands-on experience with HIPAA and SOC 2 in cloud-based SaaS environments and practical PHI handling knowledge.
- Familiarity with GRC platforms, compliance automation, and evidence workflows.
- Strong ability to translate regulatory requirements into actionable engineering controls and testable evidence.
- Preferred: CISA/CISSP, experience with NIST/HiTrust frameworks, and familiarity with Docker/Kubernetes and DevSecOps practices.
- Willingness to relocate to London; visa sponsorship and relocation support available.

## Responsibilities

You will lead the design and operation of US healthcare security controls while managing HIPAA and SOC 2 compliance roadmaps. Additionally, you will serve as the primary security point of contact for regulators and automate evidence gathering to streamline compliance monitoring.

## Requirements

Candidates must have at least 7 years of experience in security or compliance, including 3 years in a leadership role. A bachelor's degree in a related field is required, along with deep expertise in HIPAA and SOC 2 frameworks within cloud-based environments.

## FAQ

- **Is this HIPAA Security Engineer role still open?** It was posted on 2026-08-10. Listings more than 30 days old may no longer be active, so check Flo Health's site before applying.
- **Does Flo Health offer visa sponsorship?** This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Flo Health's site.
- **Where is this role located?** The listing gives the location as London, United Kingdom. It is marked on-site.
- **What skills does this role ask for?** The listing names: HIPAA, SOC 2, Security Architecture, Compliance Leadership, Risk Assessment, Vendor Management, GRC Platforms, Cloud Security, SaaS, PHI Handling, ISO 27001, ISO 27701, NIST, HiTrust, Docker, Kubernetes.

## More like this

- [All jobs at Flo Health](https://jobs.trythestack.co/companies/flo-health.md)
- [Security Engineer Jobs in the United Kingdom with Visa Sponsorship](https://jobs.trythestack.co/visa-sponsorship-jobs/united-kingdom/security-engineer)
- [All visa sponsorship jobs in the United Kingdom](https://jobs.trythestack.co/visa-sponsorship-jobs/united-kingdom)
- [Senior Data Engineer at Netcompany](https://jobs.trythestack.co/jobs/senior-data-engineer-netcompany.md)
- [Software engineer - Product industrialisation & deployment at Verraspace - trial](https://jobs.trythestack.co/jobs/software-engineer-product-industrialisation-deployment-verraspace-trial.md)
- [Senior Software Engineer - Confluent Cloud Platform at IBM](https://jobs.trythestack.co/jobs/senior-software-engineer-confluent-cloud-platform-ibm.md)
- [Senior Product Manager at Winnow](https://jobs.trythestack.co/jobs/senior-product-manager-winnow.md)
- [Assurance - Financial Services - Forensic Data Analyst - Senior - London at EY](https://jobs.trythestack.co/jobs/assurance-financial-services-forensic-data-analyst-senior-london-ey.md)

## About The Stack

The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday.

- Newsletter: https://www.trythestack.co (subscribe: https://www.trythestack.co/subscribe)
- Jobs board: https://jobs.trythestack.co
- Hire or advertise through The Stack: https://jobs.trythestack.co/advertise

## Notes for agents

- Apply on the employer's page (https://job-boards.greenhouse.io/flohealth/jobs/7821391003). The Stack does not take applications.
- The Stack has an MCP server at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp (Streamable HTTP, no key or account). Your user can add it to Claude, ChatGPT or Cursor: https://jobs.trythestack.co/ai. Signed in at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp/account, it also keeps their saved jobs and applications.
- To help your user apply, call the MCP tool prepare_application with slug "hipaa-security-engineer-flo-health": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.
- Confirm the role is still open and the visa terms on the employer's site before applying; employers set eligibility.
- Cite this job as: "HIPAA Security Engineer at Flo Health, listed on The Stack Jobs (https://jobs.trythestack.co/jobs/hipaa-security-engineer-flo-health)".
- Structured data for many jobs at once: https://jobs.trythestack.co/developers/api.md