VP of Security & Infrastructure

About the role

This role unites Security and Infrastructure under a single organizational mandate to ensure security practices align directly with rapid engineering execution and platform scalability. Flo Health protects the data of over 80 million monthly active users, holding ISO 27001 and ISO 27701 certifications alongside privacy‑first features such as Anonymous Mode.

Key responsibilities

• Develop and communicate Flo’s security strategy and roadmap, fostering a shared security ownership culture.
• Lead the security programme, covering risk management, security architecture, product security and security operations, including embedded engineering functions.
• Own cloud and developer infrastructure on GCP and AWS, managing multi‑account Kubernetes, Terraform and CI/CD delivery to reduce lead times and change‑failure rates.
• Direct product identity and access management, authentication, session handling and cryptography while balancing conversion metrics.
• Champion external trust by leading transparent communications, industry events and FemTech security advocacy.

Required profile

• Proven leadership of combined security and production infrastructure teams at consumer scale (tens of millions of users).
• Experience partnering with product, design and engineering to ship user‑facing security features.
• Track record of achieving and maintaining ISO 27001, SOC 2, HIPAA or equivalent certifications.
• Deep expertise implementing GDPR, automated data deletion, retention policies and cross‑border data controls.
• Hands‑on experience securing AI models, autonomous development agents and related audit mechanisms.

Required skills

• Google Cloud Platform (GCP)
• AWS
• Kubernetes
• Terraform
• CI/CD pipeline automation
• Identity & Access Management (IAM)
• Cryptography
• AI model security and governance
• ISO 27001, SOC 2, HIPAA compliance frameworks
• GDPR and data‑privacy engineering

What we offer

• Competitive salary (£200k‑£220k) with annual reviews and performance incentive scheme.
• Paid holiday, sick leave, female health leave and enhanced parental leave.
• Hybrid work model – three days per week in the London office.
• 5‑week fully paid sabbatical after five years, Flo Premium for friends & family, and health, pension and wellbeing perks.