HIPAA Security & Compliance Lead

Readily; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Readily in San Francisco seeks a hands-on security and compliance leader to drive HITRUST r2 and FedRAMP initiatives end-to-end. You will own scoping, controls, evidence, and auditor relations, shaping the framework that underpins major enterprise deals.

This founding role reports to the founders and requires delivering the certification and the required security systems, not just paperwork, enabling Readily to scale with healthcare customers.

Qualifications

• Done it before: led FedRAMP and/or HITRUST initiatives end-to-end.
• Hands-on: able to configure controls in AWS/Azure, not only write policy.
• Bias toward action with high ownership and problem-solving drive.
• Experience automating compliance processes and evidence collection.

Responsibilities

• Own HITRUST r2 and FedRAMP end-to-end: scoping, mapping controls, evidence, and auditor liaison.
• Implement controls across AWS/Azure: hardening, logging, monitoring, vulnerability mgmt, access controls.
• Write policies and run the audit; build POA&M and drive remediation.
• Stand up compliance automation (OneLeet) to streamline evidence collection.
• Be the enterprise trust point: respond to security questionnaires and customer reviews.
• Partner with engineering to bake security into shipping without slowing down.

Skills

HITRUST r2

FedRAMP

AWS

Azure

Security controls

Auditing

Policy writing

Automation

Threat management

Communication

Job description

About Readily

30% of U.S. healthcare cost is administration. We're fixing that. Readily is building the compliance layer for the healthcare industry. Billion dollar healthcare organizations turn to Readily to analyze regulations, conduct audits, and automate compliance readiness with AI. We're the fastest growing company in this space - 10x revenue YoY. And we're just getting started. There's an old Yorkshire saying: 'Where there's muck, there's brass.' Healthcare compliance is messy. But in that mess lies an enormous opportunity. If you're hungry to take ownership and build systems that matter, this is it.

About The Role

We're hiring our first dedicated security & compliance hire to take Readily through HITRUST r2 and FedRAMP end to end. This is a hands on founding role, not a manage from above one. You'll work directly with the founders and own the entire program: scoping, controls, evidence, auditors, and the engineering implementation behind it. The healthcare enterprises we sell to demand the highest bar of security. Getting certified is what unlocks the next tier of deals - and you'll own that outcome. Own the certification and the systems - not just the paperwork.

What You'll Do

• Own HITRUST r2 and FedRAMP end to end - scoping, control mapping (NIST 800 53 / HITRUST CSF), evidence collection, and managing the 3PAO / external assessor relationships.
• Implement the technical controls across our AWS/Azure stack: hardening, logging, continuous monitoring, vulnerability management, and access controls.
• Write the policies and run the audit - build the POA M process and drive remediation to close.
• Stand up compliance automation (OneLeet) so evidence collects itself.
• Be the point person for enterprise trust - own security questionnaires and customer security reviews so deals don't stall.
• Partner with engineering to bake security into how we ship, without slowing us down.

What We're Looking For

• Done it before: you've taken a company through FedRAMP and/or HITRUST (SOC 2 plus one of these is a strong signal). You know where the bodies are buried.
• Genuinely hands on: comfortable in AWS/Azure actually configuring controls - not just writing policy and delegating.
• Hunger: high agency, a drive to stay at the edge, and a willingness to do whatever it takes.
• Efficiency obsessed: you automate the toil instead of grinding through it manually.
• Intellectually humble: low ego, high curiosity, collaborative.
• Biased toward action: you act, you don't wait.

Bonus points: you've worked with healthcare data (PHI HIPAA) before.

Our Stack

React, Node/Python, PostgreSQL, micro services, AWS, Azure.

Why Join Readily

• True founding team ownership.
• Career defining experience: ship products that rewrite how the industry works.
• Front row to closing deals with billion dollar enterprises.
• Hyper growth environment (10x YoY - you'll feel it).
• A real chance to fix healthcare's most expensive problem with AI.
• Weekly pickleball + a team that loves to win together.

If you want true ownership and to build the security backbone that unlocks healthcare's biggest enterprises - we'd love to talk.