Head of Security

About Plenful

Plenful is on a mission to transform healthcare operations from the inside out. Fresh off our $50M Series B and backed by Notable Capital, Bessemer Venture Partners, TQ Ventures, Susa/Kivu Ventures, and other leading investors, we’re building the category-defining AI workflow automation platform that healthcare teams rely on to operate smarter, faster, and more efficiently. Our technology empowers healthcare operators across hospital and health systems, pharmacies and payors to eliminate manual work, reduce administrative burden, and improve compliance, all while unlocking critical revenue to fund programs for their in-need patient populations.

Built by healthcare operators for healthcare operators, Plenful is driven by a deep understanding of the challenges facing today’s care teams. We’re passionate about equipping healthcare workers with world‑class tools that deliver real, measurable impact, and we’re proud to serve 90+ leading health systems across the country. If you’re excited to help shape the future of healthcare, we’d love to meet you.

As we continue to scale our platform and enterprise customer base, security has become a strategic differentiator. We're looking for a leader who can build our security organization from the ground up—establishing the vision, processes, and team that will enable Plenful to scale securely while maintaining the speed and agility of a high-growth startup.

This is a rare opportunity to build and lead the Security organization at one of healthcare's fastest-growing AI companies.

As Head of Security, you'll own security across the company—from product and application security to cloud infrastructure, corporate security, governance, compliance, and customer trust. You'll establish the strategy, hire the team, implement the right tooling and processes, and partner across Engineering, Product, IT, Legal, and Executive Leadership to embed security into everything we build.

We're looking for a builder—a leader who thrives in ambiguity, enjoys creating programs from scratch, and isn't afraid to roll up their sleeves while building an organization that will scale with the business.

• Define and execute Plenful's long-term security strategy.
• Build, hire, mentor, and lead a high-performing security team.
• Establish the organizational structure, operating model, and roadmap for Security.
• Create scalable security processes that support rapid product development without slowing innovation.
• Serve as the company's security leader internally and externally.

• Establish secure software development lifecycle (SSDLC) practices across Engineering.
• Integrate security into CI/CD pipelines and developer workflows.
• Lead threat modeling, secure architecture reviews, penetration testing, vulnerability management, and application security initiatives.
• Define security standards for AI-powered products and machine learning systems.

• Own cloud security strategy across AWS infrastructure.
• Lead identity and access management, secrets management, endpoint security, infrastructure hardening, and network security.
• Build monitoring, detection, logging, and incident response capabilities.

• Lead Plenful's security compliance strategy, including SOC 2, HIPAA, HITRUST, and future certifications.
• Develop company-wide security policies, standards, and governance.
• Own vendor risk management and third-party security reviews.
• Partner closely with Legal and Compliance on security and privacy initiatives.

• Represent Security during enterprise customer security reviews.
• Partner with Sales and Customer Success to support enterprise deals and customer due diligence.
• Regularly advise executive leadership and the Board on security posture, investments, risks, and strategic priorities.
• Build a security-first culture across the organization through education and partnership.

• Build and mature Plenful's incident response program.
• Lead investigations, postmortems, tabletop exercises, and business continuity planning.
• Continuously…