Requirements

• Proven leadership managing combined or parallel Security and Production Infrastructure functions at consumer scale (tens of millions of active users).
• Experience partnering with Product, Design, and Mobile/Backend Engineering teams to ship user-facing features.
• Successful execution and ongoing maintenance of ISO 27001, SOC 2, HIPAA, or similar certification frameworks through external audits.
• Deep technical experience implementing GDPR, automated data deletion, retention policies, DPIAs, and cross-border data transfer controls.
• Practical experience securing AI models, autonomous code/development agents, and automated permission/audit systems.

Nice to Haves

• Experience with consumer sign-in optimization.
• Health/biometric data protection expertise.
• In-house offensive security engineering background.
• Mobile platform security experience.

What You'll Be Doing

• Develop and communicate Flo’s security strategy and roadmap, fostering a strong security ownership culture.
• Oversee Flo’s security programme including risk management, security architecture, product security, and security operations.
• Define and enforce standards for storing, protecting, and deleting personal and health data.
• Deliver and manage compliance for ISO 27001, ISO 27701, SOC 2 Type 2, HIPAA, EU AI Act, and Cyber Resilience Act.
• Establish evaluation and governance controls for third-party vendors and supply-chain risks.
• Oversee vulnerability management and ensure transparent, risk-based remediation processes.
• Manage security operations including detection engineering, threat monitoring, and major incident response.
• Own cloud and developer infrastructure architecture and delivery for GCP, AWS, Kubernetes, Terraform, and developer platforms.
• Embed technical security requirements throughout the software development lifecycle, optimizing automated security controls within CI/CD pipelines.
• Manage corporate IT services including identity and access controls with automated workflows.
• Direct roadmaps for user-facing security services such as authentication, session management, and cryptography.
• Establish governance and security controls for AI-assisted engineering agents and consumer-facing AI features.
• Advocate for security in FemTech by raising Flo’s security profile through external communications and industry engagement.

Perks and Benefits

• Competitive salary with annual reviews (£200,000–£220,000 GBP).
• Participation in Flo’s performance incentive scheme.
• Paid holiday, sick leave, and female health leave.
• Enhanced parental leave and pay for maternity, paternity, same-sex, and adoptive parents.
• Accelerated professional growth through impactful work and learning support.
• Hybrid work model with 3 days per week in the office.
• Five-week fully paid sabbatical at 5-year service anniversary.
• Flo Premium subscription for friends & family plus additional health, pension, and wellbeing perks.