Head of Security

Foundr • San Francisco, CA

4d • Onsite

About The Position

We're partnering with a high-growth, Series B AI company automating complex operational workflows for healthcare organizations. Backed by top-tier AI and healthcare investors and trusted by 100+ health systems and pharmacy operators, the company is scaling fast in one of the most sensitive, compliance-heavy sectors in tech. They're now looking to bring on a Head of Security to own the security function end-to-end, a foundational leadership hire with direct access to the executive team and the mandate to build security into how the company operates and sells. The Role You'll define and operationalize security across product, infrastructure, and corporate systems, in an environment where customers entrust the platform with protected health information and regulated data. This is a hands-on leadership role: strategic owner and individual contributor, working closely with engineering to embed security into how the company builds and ships.

Requirements

• Proven security engineering or security leadership experience in a high-growth startup or modern tech environment
• Strong background across cloud security (AWS/GCP), application security, and infrastructure security
• Working knowledge of healthcare data protection - HIPAA/PHI - or comparable regulated-data experience
• Ability to operate with high ownership in a 0→1 environment, balancing speed with rigor
• Strong communication skills with technical and non-technical stakeholders, including customer infosec teams

Nice To Haves

• HITRUST, SOC 2, or ISO 27001 certification experience
• Securing AI/ML systems or data pipelines
• Experience building a security program from scratch through Series B → C growth

Responsibilities

• Own the company's security strategy and roadmap across application, cloud infrastructure, and corporate environments
• Lead threat modeling, risk assessments, and secure design across the product lifecycle, including AI/ML pipelines handling sensitive healthcare data
• Drive compliance and trust programs - HIPAA, SOC 2, and related frameworks, as core enablers of enterprise sales
• Build detection and response capabilities: logging, monitoring, and incident response
• Support security reviews and trust conversations with health system customers and their infosec teams
• Partner directly with founders and engineering leadership on security posture and culture

Benefits

• First dedicated security leader — full ownership and strategic influence
• Security as a revenue enabler: enterprise healthcare buyers make it central to every deal
• Direct partnership with experienced founders and top-tier investors at a key growth phase

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed