Startups

Readily

🚀 HIPAA Security & Compliance Lead

San Francisco, CA, US

Full-time

### About Readily

30% of U.S. healthcare cost is **administration**. We're fixing that. Readily is building the **compliance layer for the healthcare industry**. Billion-dollar healthcare organizations turn to Readily to analyze regulations, conduct audits, and automate compliance readiness with AI. We're the **fastest-growing company in this space** - **10x** revenue YoY. And we're just getting started. There's an old Yorkshire saying: _"Where there's muck, there's brass."_ Healthcare compliance is messy. But in that mess lies an enormous opportunity. If you're hungry to take ownership and build systems that matter, this is it.

### About the Role

We're hiring our **first dedicated security & compliance hire** to take Readily through **HITRUST r2** and **FedRAMP** - end-to-end. This is a **hands-on founding role**, not a manage-from-above one. You'll work directly with the founders and own the entire program: scoping, controls, evidence, auditors, and the engineering implementation behind it. The healthcare enterprises we sell to demand the highest bar of security. Getting certified is what unlocks the next tier of deals - and you'll own that outcome. **Own the certification and the systems - not just the paperwork.**

### What You'll Do

  • **Own HITRUST r2 and FedRAMP end-to-end** - scoping, control mapping (NIST 800-53 / HITRUST CSF), evidence collection, and managing the 3PAO / external assessor relationships.
  • **Implement the technical controls** across our AWS/Azure stack: hardening, logging, continuous monitoring, vulnerability management, and access controls.
  • **Write the policies and run the audit** - build the POA&M process and drive remediation to close.
  • **Stand up compliance automation** (OneLeet) so evidence collects itself.
  • **Be the point person for enterprise trust** - own security questionnaires and customer security reviews so deals don't stall.
  • **Partner with engineering** to bake security into how we ship, without slowing us down.

### What We're Looking For

  • **Done it before:** You've taken a company through **FedRAMP and/or HITRUST** (SOC 2 plus one of these is a strong signal). You know where the bodies are buried.
  • **Genuinely hands-on:** Comfortable in AWS/Azure actually configuring controls - not just writing policy and delegating.
  • **Hunger:** High agency, a drive to stay at the edge, and a willingness to do whatever it takes.
  • **Efficiency-obsessed:** You automate the toil instead of grinding through it manually.
  • **Intellectually humble:** Low ego, high curiosity, collaborative.
  • **Biased toward action:** You act, you don't wait.

**Bonus points:** You've worked with healthcare data (PHI/HIPAA) before.

### Our Stack

React, Node/Python, PostgreSQL, micro-services, AWS, Azure.

### Why Join Readily

  • **True founding-team ownership.**
  • **Career-defining experience:** ship products that rewrite how the industry works.
  • Front-row to closing deals **with billion-dollar enterprises**.
  • **Hyper-growth environment** (10× YoY - you'll feel it).
  • A real chance to **fix healthcare's most expensive problem** with AI.
  • Weekly pickleball 🏓 + a team that loves to win together.

📩 If you want true ownership and to build the security backbone that unlocks healthcare's biggest enterprises - we'd love to talk.

Sourced 2026-09-28