Lead Security Specialist (HIPAA)

TL;DR

Lead Security Specialist (HIPAA): Designing and operating US Healthcare security controls, owning the roadmap for HIPAA compliance and SOC2 Type II certification with an accent on managing interfaces with external auditors, defining security policies, and embedding risk assessment. Focus on streamlining compliance monitoring and reporting, and serving as the primary security point of contact for US regulators.

Location: Flexible office + home working, up to 2 months a year working abroad

Company

hirify.global is the world’s #1 health & fitness app, backed by a $200M investment, on a mission to build a better future for female health with AI-powered, privacy-first solutions.

What you will do

• Lead annual SOC 2 and HIPAA certifications, managing interfaces with external auditors.
• Define and maintain security policies, embedding risk assessment in engineering processes and vendor management.
• Partner with control owners to automate evidence gathering and ensure controls reduce friction.
• Serve as the primary Security POC for US regulators and support ISO 27001/27701 alignment.
• Manage and integrate GRC platforms to streamline compliance monitoring and reporting.

Requirements

• 7+ years in security/compliance (3+ in leadership).
• Deep expertise in SOC 2 and HIPAA frameworks within a Cloud-based SaaS environment.
• Familiarity with PHI handling, GRC platforms, and compliance automation.
• Strong ability to translate complex compliance requirements into clear actions for engineering teams.
• Bachelor’s degree in a related field.

Nice to have

• CISA/CISSP certifications.
• Experience with NIST, HiTrust, Docker/Kubernetes, and DevSecOps.

Culture & Benefits

• Competitive salary and annual reviews with opportunity to participate in performance incentive scheme.
• Paid holiday, sick leave, female health leave, and enhanced parental leave.
• Accelerated professional growth through world-changing work and learning support.
• Flexible office + home working, with up to 2 months a year working abroad.
• 5-week fully paid sabbatical at 5-year Floversary.
• Flo Premium for friends & family, plus health, pension, and wellbeing perks.