VP of Security & Infrastructure

The role

The VP of Security & Infrastructure unites security and infrastructure to ensure security practices align with engineering execution and platform scalability. This person will oversee security strategy, data protection, regulatory compliance, and platform engineering for a health and fitness app.

What you will do

• Develop and communicate security strategy and roadmap
• Oversee security programme, risk management, and security operations
• Define and enforce standards for storing and protecting personal and health data
• Deliver technical controls and compliance for ISO 27001, ISO 27701, SOC 2 Type 2, HIPAA, EU AI Act, and Cyber Resilience Act
• Establish governance controls for vendors, SDKs, and external partners
• Oversee the management life cycle of code, third party and platform vulnerabilities
• Oversee detection engineering and continuous threat monitoring
• Own GCP and AWS multi-account architecture, Kubernetes, Terraform, and developer platform delivery
• Embed technical security requirements across the development lifecycle
• Manage IT service provision, identity, hardware devices, and access controls

Required qualifications

• Proven track record of managing combined or parallel Security and Production Infrastructure functions at consumer scale
• Demonstrated experience partnering with Product, Design, and Mobile/Backend Engineering teams
• Successful execution and ongoing maintenance of ISO 27001, SOC 2, HIPAA, or equivalent certification frameworks
• Deep technical experience implementing GDPR, automated data deletion, retention policies, DPIAs, and cross-border transfer controls programmatically
• Practical implementation experience securing AI models, autonomous code/development agents, and automated permission/audit systems

Nice to have

• Experience with consumer sign-in optimization
• health/biometric data protection
• in-house offensive security engineering
• mobile platform security

Benefits

• Competitive salary and annual reviews
• Opportunity to participate in Flo’s performance incentive scheme
• Paid holiday, sick leave, and female health leave
• Enhanced parental leave and pay for maternity, paternity, same-sex and adoptive parents
• Accelerated professional growth through world-changing work and learning support
• 5-week fully paid sabbatical at 5-year Floversary
• Flo Premium for friends & family
• health, pension and wellbeing perks

About the company

Flo is the world’s #1 health & fitness app with over 500M downloads and 80M monthly users. It is a mission-led company building AI-powered, privacy-first digital health tools.