Plenful Logo

Plenful

Head of Security

Posted 15 Days Ago
Be an Early Applicant
In-Office
San Francisco, CA, USA
Expert/Leader
In-Office
San Francisco, CA, USA
Expert/Leader
Lead and build Plenful's security function company-wide: strategy, team hiring, SSDLC and DevSecOps, cloud and infrastructure security (AWS), governance and compliance (SOC 2, HIPAA, HITRUST), incident response, vendor risk, and customer security engagement to support enterprise growth.
The summary above was generated by AI
About Plenful

Plenful is on a mission to transform healthcare operations from the inside out. Fresh off our $50M Series B and backed by Notable Capital, Bessemer Venture Partners, TQ Ventures, Susa/Kivu Ventures, and other leading investors, we’re building the category-defining AI workflow automation platform that healthcare teams rely on to operate smarter, faster, and more efficiently. Our technology empowers healthcare operators across hospital and health systems, pharmacies and payors to eliminate manual work, reduce administrative burden, and improve compliance, all while unlocking critical revenue to fund programs for their in-need patient populations.


Built by healthcare operators for healthcare operators, Plenful is driven by a deep understanding of the challenges facing today’s care teams. We’re passionate about equipping healthcare workers with world-class tools that deliver real, measurable impact, and we’re proud to serve 90+ leading health systems across the country. If you’re excited to help shape the future of healthcare, we’d love to meet you. Apply now to join our growing team.

About the Role

Security is now a strategic differentiator for Plenful, and we're building the function from the ground up. As Head of Security, you'll own security across the company — product and application security, cloud infrastructure, corporate security, governance, compliance, and customer trust.

You'll set the strategy, hire the team, and build the processes that let us scale securely without losing the speed of a high-growth startup. You'll partner across Engineering, Product, IT, Legal, and Executive Leadership to embed security into everything we build.

We're looking for a builder — someone who's comfortable in ambiguity, has stood up security programs from zero before, and wants to build an organization that scales with the business.

In your first 12 months, you'll build and execute a company-wide security roadmap, stand up a high-performing security organization, mature our cloud, application, and corporate security capabilities, and strengthen the compliance and customer trust programs that support enterprise growth.

What You'll Do

Build the Security Organization

  • Define and execute Plenful's long-term security strategy

  • Hire, mentor, and lead a high-performing security team

  • Establish the organizational structure, operating model, and roadmap for Security

  • Build processes that support rapid product development without slowing innovation

  • Serve as Plenful's security leader, internally and externally

Product & Application Security

  • Establish secure software development lifecycle (SSDLC) practices across Engineering

  • Integrate security into CI/CD pipelines and developer workflows

  • Lead threat modeling, secure architecture reviews, penetration testing, and vulnerability management

  • Define security standards for our AI-powered products and ML systems

Cloud & Infrastructure Security

  • Own cloud security strategy across our AWS infrastructure

  • Lead IAM, secrets management, endpoint security, infrastructure hardening, and network security

  • Build monitoring, detection, logging, and incident response capabilities

Governance, Risk & Compliance

  • Lead our security compliance strategy — SOC 2, HIPAA, HITRUST, and what comes next

  • Develop company-wide security policies, standards, and governance

  • Own vendor risk management and third-party security reviews

  • Partner with Legal and Compliance on security and privacy initiatives

Customer Trust & Executive Partnership

  • Represent Security in enterprise customer security reviews

  • Partner with Sales and Customer Success on enterprise deals and due diligence

  • Advise executive leadership and the Board on security posture, risk, and investment priorities

  • Build a security-first culture through education and partnership

Incident Response

  • Build and mature Plenful's incident response program

  • Lead investigations, postmortems, tabletop exercises, and business continuity planning

  • Continuously improve security monitoring and threat detection

You May Be a Fit If
  • You have 15+ years of progressive experience in cybersecurity, information security, cloud security, or infrastructure security

  • You've spent 5+ years leading security organizations at technology companies

  • You've built and scaled security programs from the ground up

  • You have a strong technical background in modern cloud environments, ideally AWS

  • You bring deep expertise in application security, cloud security, IAM, DevSecOps, vulnerability management, and incident response

  • You've secured enterprise SaaS platforms

  • You have experience with healthcare security and compliance frameworks, including HIPAA and SOC 2

  • You've partnered closely with Engineering to build secure development practices

  • You communicate exceptionally well — with executives, engineers, customers, and auditors alike

  • You have a Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent practical experience

Bonus points if you:

  • Have led Security at a startup or high-growth technology company

  • Have built organizations through periods of rapid scale

  • Have HITRUST certification experience

  • Have secured AI/ML platforms and modern data infrastructure

  • Have experience with container security, Infrastructure as Code, and cloud-native architectures

  • Hold a CISSP, CISM, CCSP, GIAC, or comparable certification

Why You'll Love Working Here
  • 🚀 Mission-Driven, World-Class Team — Join an exceptional group of professionals aligned around a meaningful mission and committed to making an impact

  • 📈 Opportunities for Growth — Strengthen your expertise through collaboration with experienced, high-performing leaders across the organization

  • 🏢 Flexible Hybrid Work Environment — We're remote-first, with meaningful office presence in San Francisco and New York. R&D roles follow a hybrid model, with two days per week in our San Francisco office

Benefits & Perks
  • 🏥 Healthcare Coverage — Full medical, dental, and vision insurance for you and participation for your family

  • 💰 401(k) with Company Match — Plenful matches 50% of your first 3% contributed

  • 📊 Equity — Every full-time employee shares in our success

  • 🌴 Unlimited PTO — Take the time you need, when you need it

  • 🍽️ Daily Lunch Stipend — $100/week to cover your midday meals

  • 💪 Wellness Stipend — $100/month to support your health and well-being

  • 🚇 Commuter Benefits — $100/month for SF and NYC-based employees

  • 👶 Parental Leave — Paid leave to support growing families

HQ

Plenful San Francisco, California, USA Office

San Francisco, CA, United States

Similar Jobs

Yesterday
In-Office
154K-259K Annually
Expert/Leader
154K-259K Annually
Expert/Leader
Biotech
Leads industrial security programs supporting an aerospace and defense business. Develops security policies, compliance programs, incident response and technology control plans, and classified information protection processes. Advises executives and government representatives, manages investigations and security training, coordinates with law enforcement and security agencies, and leads security personnel while ensuring contractual and regulatory compliance.
Top Skills: 32 Cfr Part 117Dd-254DfarsNispomNist Sp 800-171Nist Sp 800-172Nist Sp 800-53OpsecSpecial Access Program (Sap)
13 Days Ago
In-Office
San Francisco, CA, USA
150K-250K Annually
Entry level
150K-250K Annually
Entry level
Artificial Intelligence • Robotics • Automation • Manufacturing
Own Foundry Robotics’ security and compliance program, including CMMC Level 2 certification, NIST SP 800-171 and DFARS compliance, ITAR/EAR controls, and CUI protection. Lead identity, endpoint, network, cloud, edge, and on-premises security; manage incident response and third-party risk; and build the security roadmap, budget, and team. The role requires hands-on security engineering, facility security expertise, startup leadership, and collaboration across engineering, IT, quality, and operations.
Top Skills: 1PasswordAs9100AWSCloudflareCmmcCrowdstrike EdrDfars 252.204-7012EarGoogleGpu InfrastructureItarJetson OrinJumpcloud MdmNist Sp 800-171Soc 2Tailscale
15 Days Ago
In-Office
Santa Clara, CA, USA
188K-281K Annually
Expert/Leader
188K-281K Annually
Expert/Leader
Artificial Intelligence • Automotive • Semiconductor
Lead and build Marvell's global physical security program, defining strategy, governance, GSOC and security technology, overseeing risk assessments, incident response, vendor management, executive advisory, crisis management, and global security operations across offices, labs, and manufacturing sites.
Top Skills: Access ControlAlarm MonitoringBadge GovernanceCctvEmergency Notification SystemsFusion CenterGlobal Security Operations Center (Gsoc)Incident Management ToolsIntrusion DetectionMass Communication SystemsSecurity AnalyticsSecurity Technology PlatformsThreat IntelligenceVideo Management Systems (Vms)Video SurveillanceVisitor Management

What you need to know about the San Francisco Tech Scene

San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.

Key Facts About San Francisco Tech

  • Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Google, Apple, Salesforce, Meta
  • Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
  • Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
  • Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account