Security & Compliance Lead

### About Readily 30% of U.S. healthcare cost is **administration**. We're fixing that. Readily is building the **compliance layer for the healthcare industry**. Billion-dollar healthcare organizations turn to Readily to analyze regulations, conduct audits, and automate compliance readiness with AI. We're the **fastest-growing company in this space** - **10x** revenue YoY. And we're just getting started. There's an old Yorkshire saying: _"Where there's muck, there's brass."_ Healthcare compliance is messy. But in that mess lies an enormous opportunity. If you're hungry to take ownership and build systems that matter, this is it. ### About the Role We're hiring our **first dedicated security & compliance hire** to take Readily through **HITRUST r2** and **FedRAMP** - end-to-end. This is a **hands-on founding role**, not a manage-from-above one. You'll work directly with the founders and own the entire program: scoping, controls, evidence, auditors, and the engineering implementation behind it. The healthcare enterprises we sell to demand the highest bar of security. Getting certified is what unlocks the next tier of deals - and you'll own that outcome. **Own the certification and the systems - not just the paperwork.** ### What You'll Do * **Own HITRUST r2 and FedRAMP end-to-end** - scoping, control mapping (NIST 800-53 / HITRUST CSF), evidence collection, and managing the 3PAO / external assessor relationships. * **Implement the technical controls** across our AWS/Azure stack: hardening, logging, continuous monitoring, vulnerability management, and access controls. * **Write the policies and run the audit** - build the POA&M process and drive remediation to close. * **Stand up compliance automation** (OneLeet) so evidence collects itself. * **Be the point person for enterprise trust** - own security questionnaires and customer security reviews so deals don't stall. * **Partner with engineering** to bake security into how we ship, without slowing us down. ### What We're Looking For * **Done it before:** You've taken a company through **FedRAMP and/or HITRUST** (SOC 2 plus one of these is a strong signal). You know where the bodies are buried. * **Genuinely hands-on:** Comfortable in AWS/Azure actually configuring controls - not just writing policy and delegating. * **Hunger:** High agency, a drive to stay at the edge, and a willingness to do whatever it takes. * **Efficiency-obsessed:** You automate the toil instead of grinding through it manually. * **Intellectually humble:** Low ego, high curiosity, collaborative. * **Biased toward action:** You act, you don't wait. **Bonus points:** You've worked with healthcare data (PHI/HIPAA) before. ### Our Stack React, Node/Python, PostgreSQL, micro-services, AWS, Azure. ### Why Join Readily * **True founding-team ownership.** * **Career-defining experience:** ship products that rewrite how the industry works. * Front-row to closing deals **with billion-dollar enterprises**. * **Hyper-growth environment** (10 YoY - you'll feel it). * A real chance to **fix healthcare's most expensive problem** with AI. * Weekly pickleball + a team that loves to win together. If you want true ownership and to build the security backbone that unlocks healthcare's biggest enterprises - we'd love to talk.