Head of Security

About the role

Plenful is a healthcare AI workflow automation platform transforming operations through advanced technology. Backed by leading investors, we empower healthcare teams to operate smarter, faster, and more efficiently. We are seeking a visionary leader to build and lead our Security organization, ensuring secure growth while maintaining agility.

Opportunity

This is a unique chance to build and lead the Security organization at one of healthcare's fastest-growing AI companies. As Head of Security, you'll define and execute the long-term strategy, build a high-performing team, and ensure security is integrated into every aspect of our operations.

What You'll Do

• Build the Security Organization
• Define and execute Plenful's long-term security strategy.
• Hire, mentor, and lead a high-performing security team.
• Create scalable security processes that support rapid product development.
• Partner across Engineering, Product, IT, Legal, and Executive Leadership.

Product & Application Security

• Establish secure software development lifecycle (SSDLC) practices across Engineering.
• Integrate security into CI/CD pipelines and developer workflows.
• Lead threat modeling, secure architecture reviews, penetration testing, vulnerability management, and application security initiatives.
• Define security standards for AI-powered products and machine learning systems.

Cloud & Infrastructure Security

• Own cloud security strategy across AWS infrastructure.
• Lead identity and access management, secrets management, endpoint security, infrastructure hardening, and network security.
• Build monitoring, detection, logging, and incident response capabilities.

Governance, Risk & Compliance

• Lead Plenful's security compliance strategy, including SOC 2, HIPAA, HITRUST, and future certifications.
• Develop company-wide security policies, standards, and governance.
• Own vendor risk management and third-party security reviews.
• Partner closely with Legal and Compliance on security and privacy initiatives.

Customer Trust & Executive Partnership

• Represent Security during enterprise customer security reviews.
• Partner with Sales and Customer Success to support enterprise deals and customer due diligence.
• Regularly advise executive leadership and the Board on security posture, investments, risks, and strategic priorities.
• Build a security-first culture across the organization through education and partnership.

Incident Response

• Build and mature Plenful's incident response program.
• Lead investigations, postmortems, tabletop exercises, and business continuity planning.
• Continuously improve security monitoring and threat detection capabilities.

Required Qualifications

• 15+ years of progressive experience in cybersecurity, information security, cloud security, or infrastructure security.
• 5+ years leading security organizations in technology companies.
• Experience building and scaling security programs from the ground up.
• Strong technical background in modern cloud environments, preferably AWS.
• Deep expertise in application security, cloud security, IAM, DevSecOps, vulnerability management, and incident response.
• Experience securing enterprise SaaS platforms.
• Experience with healthcare security and compliance frameworks including HIPAA and SOC 2.
• Demonstrated success partnering closely with Engineering to build secure development practices.
• Exceptional communication skills with the ability to influence executives, engineers, customers, and auditors alike.
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent practical experience.

Preferred Qualifications

• Experience leading Security at a startup or high-growth technology company.
• Experience building organizations through periods of rapid scale.
• Experience with HITRUST certification.
• Experience securing AI/ML platforms and modern data infrastructure.
• Experience with Kubernetes, container security, Infrastructure as Code, and cloud-native architectures.
• CISSP, CISM, CCSP, GIAC, or comparable certifications.

Why You'll Love Working Here

• Mission-driven, world-class team aligned around a meaningful mission.
• Opportunities for growth through collaboration with experienced, high-performing leaders.
• A flexible hybrid work environment with remote-first options.
• Benefits and perks including healthcare coverage, 401(k) with company match, equity, unlimited PTO, daily lunch stipend, wellness stipend, commuter benefits, and parental leave.