HIPAA Security Engineer

Location: London, UK; hybrid work with 3 days per week in the office

Company

hirify.global develops a privacy-first, clinically backed digital health platform for female health, serving millions of users worldwide.

What you will do

• Lead annual SOC 2 and HIPAA certification processes, coordinating external auditors and professional services.
• Define and maintain security policies, risk assessments, and vendor management controls.
• Partner with control owners and engineering teams to automate evidence collection and improve control operations.
• Act as the primary Security point of contact for US regulators and partners.
• Support alignment with ISO 27001 and ISO 27701 requirements.
• Manage and integrate GRC platforms for compliance monitoring and reporting.

Requirements

• 7+ years of experience in security or compliance, including 3+ years in a leadership capacity.
• Bachelor’s degree in a related field.
• Deep expertise in SOC 2 and HIPAA frameworks within a cloud-based SaaS environment.
• Knowledge of PHI handling, GRC platforms, and compliance automation.
• Ability to translate complex compliance requirements into clear actions for engineering teams.

Nice to have

• CISA or CISSP certification.
• Experience with NIST and HITRUST frameworks.
• Knowledge of Docker, Kubernetes, and DevSecOps practices.

Culture & Benefits

• Mission-led, product-driven environment with shared decision-making and a strong focus on ownership.
• Paid holiday, sick leave, and female health leave.
• Enhanced parental leave and pay for maternity, paternity, same-sex, and adoptive parents.
• Professional growth opportunities and learning support.
• Five-week fully paid sabbatical after five years.
• Health, pension, wellbeing, and Flo Premium benefits for friends and family.