or apply directly on Flo Health's site. We never take the application ourselves.
Is this posting real?
- This role has been open
- 73 days Flo Health's roles stay open a median of 81 days
- Reposted
- No
- Salary listed
- No 0% of Flo Health's roles list one
- Ghost-job risk at Flo Health
- high 28 stale, 1 reposted of 28 open
- Hiring momentum
- 45 roles opened in the last 90 days ↑ up vs. the prior 90 days
- Last confirmed on the employer's board
- 2026-10-23
Measured from postings appearing on and disappearing from Flo Health's own greenhouse board since 2026-08-03. Full hiring picture for Flo Health.
About this role
As a HIPAA Security Engineer at Flo, you'll lead the design and operation of security controls specific to US healthcare compliance. This role involves collaborating with Product and Engineering teams to implement HIPAA and SOC 2 requirements within Flo's AWS environment, managing compliance certifications, and ensuring the security of services handling protected health information (PHI). You'll also be responsible for vendor risk management and maintaining security policies while serving as the primary point of contact for US regulators.
- benefits
- 4/5
- freshness
- 1/5
- career value
- 4/5
- role clarity
- 5/5
- pay transparency
- 0/5
Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of Flo Health as an employer.
What you need
- 7+ years in security, compliance, or risk management (3+ in a leadership capacity)
- Bachelor's degree in a related field or equivalent experience
- Deep expertise in SOC 2 and HIPAA frameworks within the AWS environment
- Familiarity with PHI handling, GRC and compliance automation platforms
- Strong ability to manage multiple concurrent audit and certification workstreams
- Excellent written and verbal communication skills
Nice to have
- CISA, CISM, or CISSP certifications
- Experience with NIST 800-53, Cloud Security Alliance (CSA), and Center for Internet Security (CIS) frameworks
- Experience in healthcare or another regulated industry; HITRUST experience a plus
- Experience building compliance roadmaps in early-stage startups
- Exposure to containerization (Docker/Kubernetes), serverless, and big data platforms
What you get
- Competitive salary and annual reviews
- Opportunity to participate in Flo’s performance incentive scheme
- Paid holiday, sick leave, and female health leave
- Enhanced parental leave and pay for maternity, paternity, same-sex and adoptive parents
- Accelerated professional growth through world-changing work and learning support
- In-person collaboration and work in a hybrid model, with 3 days per week spent in the office
Worth weighing
- No specific mention of remote work flexibility beyond hybrid model
- The role requires significant experience, which may limit opportunities for less experienced candidates
- Focus on compliance may not appeal to those seeking a more technical or development-oriented role
Summarised from Flo Health's posting. Read the full original.
Listed by Flo Health on their greenhouse job board, last confirmed open on 2026-10-23. PitchMeAI is not the employer.
More roles at Flo Health
- Senior AI/ML engineerLondon
- Senior Technical Product Manager - Health RecordsLondon, Vilnius
- Senior DevEx EngineerVilnius
- Senior DevEx EngineerLondon
- Senior User Acquisition Manager (Web)Vilnius
- Freelancer - Creative ProducerUkraine
- Creative DirectorLondon
- Director, Head of Global PR & CommunicationsLondon