Vice President of Security & Infrastructure

Join Flo Health, a leading FemTech company, as the Vice President of Security & Infrastructure. In this role, you will be responsible for developing and communicating Flo's security strategy and roadmap, overseeing all aspects of the security program, and ensuring compliance with various regulatory standards. You will also manage cloud and developer infrastructure, corporate IT and access controls, and advocate for security in the FemTech industry. Enjoy benefits such as participation in the Employee Share Ownership Plan, generous parental leave, and a flexible workplace.

• Develop, evolve, and communicate Flo’s security strategy and roadmap, promoting a strong shared security ownership culture.
• Oversee all aspects of Flo’s security program, risk management, security architecture, product security, and security operations, including embedded security engineering functions.
• Define and enforce standards for storing, protecting, and deleting personal and health data across production systems, analytics warehouses, AI model training sets, backups, and search indexes.

• AI Governance & Security: Practical implementation experience securing AI models, autonomous code/development agents, and automated permission/audit systems
• Leadership Experience: Proven track record of managing combined or parallel Security and Production Infrastructure functions at consumer scale (tens of millions of active users)
• Audit Track Record: Successful execution and ongoing maintenance of ISO 27001, SOC 2, HIPAA, or equivalent certification frameworks through external audits
• Data Privacy Systems: Deep technical experience implementing GDPR, automated data deletion, retention policies, DPIAs, and cross-border transfer controls programmatically
• Product Integration: Demonstrated experience partnering with Product, Design, and Mobile/Backend Engineering teams to ship user-facing features to roadmap
• Preferred Qualifications: Experience with consumer sign-in optimization, health/biometric data protection, in-house offensive security engineering, and mobile platform security