Security & Compliance Manager (GRC), US-based

About Collectly Collectly is a patient billing and payments platform for US healthcare providers.

We handle protected health information and card payments at scale, integrate directly with major EHRs, and sell to health systems and large provider organizations buyers with real security programs and real diligence processes. We're HITRUST i1 Validated and SOC 2 Type 2.

The role You'll own security and compliance end to end. Today it's split between the CTO and whichever engineer happens to be nearest. You'll take all of it. You'll be the only person in this function, so the job is to build a program that scales without adding drag.

Automate the evidence, delete the controls nobody can trace to a requirement, and answer the hard customer questions yourself instead of routing them to engineering. What you'll own Customer-facing security and compliance The largest part of the job.

Answering customers’ security questionnaires AI governance questionnaires and responsible-AI reviews covering our AI patient billing agent Live security calls with prospects' InfoSec teams — technical conversations, not slide reading Health-system procurement portals (Archer, ProcessUnity, Venminder and similar) Annual customer reattestation cycles Customer security escalations, incident communications, and customer-facing RCAs Hosting customers who exercise right-to-audit clauses Distribution of SOC 2, HITRUST certification, pen test summaries, and subprocessor notices under NDA A public trust center, standard security package, and answer library — so most of the above becomes a lookup rather than a project Audits and certifications HITRUST i1 and SOC 2 Type 2, end to end: readiness, evidence, auditor management, remediation tracking PCI DSS: SAQ ownership, AOC collection from processors, scope definition for card-present and card-not-present flows Annual HIPAA Security Risk Analysis and risk register Pen test lifecycle: scheduling, scoping, remediation tracking, customer-facing summary Quart