Head of Security & Trust, Cloud, IAM & Compliance

CyberJobs.Com; San Francisco (CA); On-site; USD 250,000 - 450,000; Full time

Benefits offered by this job

Healthcare Coverage

401(k) with Company Match

Equity

Unlimited PTO

Daily Lunch Stipend

Wellness Stipend

Commuter Benefits

Parental Leave

Job summary

Plenful is seeking a Head of Security to own security across the company, including product, cloud, governance, and customer trust. You will set strategy, hire the team, and build scalable processes for a fast-growing healthcare AI platform.

You'll partner with Engineering, Product, IT, Legal, and Leadership to embed security by design, drive enterprise-grade risk management, and lead incident response and compliance programs such as SOC 2 and HIPAA.

Qualifications

• 15+ years in cybersecurity, information security, cloud security, or infrastructure security.
• 5+ years leading security organizations at technology companies.
• Experience building security programs from the ground up.

Responsibilities

• Define and execute the long-term security strategy and organization.
• Lead SSDLC, CI/CD integration, threat modeling, and secure architecture reviews.
• Own cloud security across AWS infrastructure and IAM, secrets, and network security.
• Develop security policies, governance, and vendor risk management.
• Represent Security in enterprise reviews and partner with executives and customers.
• Build and mature incident response program and postmortems.

Skills

Security leadership

Cloud security

Application security

DevSecOps

Incident response

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent practical experience

Tools

AWS

CI/CD

Threat modeling

Vulnerability management

Job description

Plenful is seeking a Head of Security to own security across the company, including product, cloud, governance, and customer trust. You will set strategy, hire the team, and build scalable processes for a fast-growing healthcare AI platform.

You'll partner with Engineering, Product, IT, Legal, and Leadership to embed security by design, drive enterprise-grade risk management, and lead incident response and compliance programs such as SOC 2 and HIPAA.