🚀 Security & Compliance Lead

About Readily

30% of U.S. healthcare cost is administration. We're fixing that.

Readily is building the compliance layer for the healthcare industry. Billion-dollar healthcare organizations turn to Readily to analyze regulations, conduct audits, and automate compliance readiness with AI.

We're the fastest-growing company in this space - 10x revenue YoY. And we're just getting started.

There's an old Yorkshire saying: "Where there's muck, there's brass." Healthcare compliance is messy. But in that mess lies an enormous opportunity. If you're hungry to take ownership and build systems that matter, this is it.

About the Role

We're hiring our first dedicated security & compliance hire to take Readily through HITRUST r2 and FedRAMP - end-to-end. This is a hands-on founding role, not a manage-from-above one. You'll work directly with the founders and own the entire program: scoping, controls, evidence, auditors, and the technical implementation behind it.

The healthcare enterprises we sell to demand the highest bar of security. Getting certified is what unlocks the next tier of deals - and you'll own that outcome. Own the certification and the systems - not just the paperwork.

What You'll Do

• Own HITRUST r2 and FedRAMP end-to-end - scoping, control mapping (NIST 800-53 / HITRUST CSF), evidence collection, and managing the 3PAO / external assessor relationships.
• Implement the technical controls across our AWS/Azure stack: hardening, logging, continuous monitoring, vulnerability management, and access controls.
• Write the policies and run the audit - build the POA&M process and drive remediation to close.
• Stand up compliance automation (OneLeet) so evidence collects itself.
• Be the point person for enterprise trust - own security questionnaires and customer security reviews so deals don't stall.
• Partner with engineering to bake security into how we ship, without slowing us down.

What We're Looking For

• Done it before: You've taken a company through FedRAMP and/or HITRUST (SOC 2 plus one of these is a strong signal). You know where the bodies are buried.
• Genuinely hands-on: Comfortable in AWS/Azure actually configuring controls - not just writing policy and delegating.
• Hunger: High agency, a drive to stay at the edge, and a willingness to do whatever it takes.
• Efficiency-obsessed: You automate the toil instead of grinding through it manually.
• Intellectually humble: Low ego, high curiosity, collaborative.
• Biased toward action: You act, you don't wait.

Bonus points: You've managed continuous monitoring post-authorization, or worked with healthcare data (PHI/HIPAA) before.

Our Stack

React, Node/Python, PostgreSQL, micro-services, AWS, Azure.

Why Join Readily

• True founding-team ownership.
• Career-defining experience: ship products that rewrite how the industry works.
• Front-row to closing deals with billion-dollar enterprises.
• Hyper-growth environment (10× YoY - you'll feel it).
• A real chance to fix healthcare's most expensive problem with AI.
• Weekly pickleball 🏓 + a team that loves to win together.

📩 If you want true ownership and to build the security backbone that unlocks healthcare's biggest enterprises - we'd love to talk.