Head of Security

About Plenful Plenful is on a mission to transform healthcare operations from the inside out. Fresh off our $50M Series B and backed by Notable Capital, Bessemer Venture Partners, TQ Ventures, Susa/Kivu Ventures, and other leading investors, we’re building the category-defining AI workflow automation platform that healthcare teams rely on to operate smarter, faster, and more efficiently. Our technology empowers healthcare operators across hospital and health systems, pharmacies and payors to eliminate manual work, reduce administrative burden, and improve compliance, all while unlocking critical revenue to fund programs for their in-need patient populations. Built by healthcare operators for healthcare operators, Plenful is driven by a deep understanding of the challenges facing today’s care teams. We’re passionate about equipping healthcare workers with world-class tools that deliver real, measurable impact, and we’re proud to serve 90+ leading health systems across the country. If you’re excited to help shape the future of healthcare, we’d love to meet you. The Opportunity This is a rare opportunity to build and lead the Security organization at one of healthcare's fastest-growing AI companies. As Head of Security, you’ll own security across the company—from product and application security to cloud infrastructure, corporate security, governance, compliance, and customer trust. You’ll establish the strategy, hire the team, implement the right tooling and processes, and partner across Engineering, Product, IT, Legal, and Executive Leadership to embed security into everything we build. We're looking for a builder—a leader who thrives in ambiguity, enjoys creating programs from scratch, and isn't afraid to roll up their sleeves while building an organization that will scale with the business. What You'll Do Build the Security Organization Define and execute Plenful's long-term security strategy. Build, hire, mentor, and lead a high-performing security team. Establish the organizational structure, operating model, and roadmap for Security. Create scalable security processes that support rapid product development without slowing innovation. Serve as the company's security leader internally and externally. Product & Application Security Establish secure software development lifecycle (SSDLC) practices across Engineering. Integrate security into CI/CD pipelines and developer workflows. Lead threat modeling, secure architecture reviews, penetration testing, vulnerability management, and application security initiatives. Define security standards for AI-powered products and machine learning systems. Cloud & Infrastructure Security Own cloud security strategy across AWS infrastructure. Lead identity and access management, secrets management, endpoint security, infrastructure hardening, and network security. Build monitoring, detection, logging, and incident response capabilities. Governance, Risk & Compliance Lead Plenful's security compliance strategy, including SOC 2, HIPAA, HITRUST, and future certifications. Develop company-wide security policies, standards, and governance. Own vendor risk management and third-party security reviews. Partner closely with Legal and Compliance on security and privacy initiatives. Customer Trust & Executive Partnership Represent Security during enterprise customer security reviews. Partner with Sales and Customer Success to support enterprise deals and customer due diligence. Regularly advise executive leadership and the Board on security posture, investments, risks, and strategic priorities. Build a security-first culture across the organization through education and partnership. Incident Response Build and mature Plenful's incident response program. Lead investigations, postmortems, tabletop exercises, and business continuity planning. Continuously improve security monitoring and threat detection capabilities. What We're Looking For Required Qualifications 15+ years of progressive experience in cybersecurity, information security, cloud security, or infrastructure security. 5+ years leading security organizations in technology companies. Experience building and scaling security programs from the ground up. Strong technical background in modern cloud environments, preferably AWS. Deep expertise in application security, cloud security, IAM, DevSecOps, vulnerability management, and incident response. Experience securing enterprise SaaS platforms. Experience with healthcare security and compliance frameworks including HIPAA and SOC 2. Demonstrated success partnering closely with Engineering to build secure development practices. Exceptional communication skills with the ability to influence executives, engineers, customers, and auditors alike. Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent practical experience. Preferred Qualifications Experience leading Security at a startup or high-growth technology company. Experience building organizations through periods of rapid scale. Experience with HITRUST certification. Experience securing AI/ML platforms and modern data infrastructure. Experience with Kubernetes, container security, Infrastructure as Code, and cloud-native architectures. CISSP, CISM, CCSP, GIAC, or comparable certifications. What Success Looks Like Within Your First 12 Months, You Will Build and execute a comprehensive company-wide security roadmap. Establish a high-performing Security organization. Mature Plenful's cloud, application, and corporate security capabilities. Strengthen compliance and customer trust programs to support enterprise growth. Implement scalable security practices that become embedded throughout Engineering and Product. Serve as a trusted executive partner helping shape the company's long-term technology strategy. Why You'll Love Working Here Mission-Driven, World-Class Team - Join an exceptional group of professionals aligned around a meaningful mission and committed to making an impact Opportunities for Growth - Strengthen your expertise through collaboration with experienced, high-performing leaders across the organization Flexible Hybrid Work Environment - We're remote-first, with meaningful office presence in San Francisco and New York. R&D roles follow a hybrid model, with two days per week in our San Francisco office Benefits & Perks Healthcare Coverage - Full medical, dental, and vision insurance for you and participation for your family 401(k) with Company Match - Plenful matches 50% of your first 3% contributed Equity - Every full-time employee shares in our success Unlimited PTO - Take the time you need, when you need it Daily Lunch Stipend - $100/week to cover your midday meals Wellness Stipend - $100/month to support your health and well-being Commuter Benefits - $100/month for SF and NYC-based employees Parental Leave - Paid leave to support growing families #J-18808-Ljbffr RXinsider LTD.